CVE-2007-4998

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.

Score

CVSS 2.0 6.9 Medium

Status

Modified - secalert@redhat.com

Published

2008-01-31

Last modified

2024-08-07

Weaknesses

CWE-59

Affected products

• Linux Kernel (Linux)

References

• http://osvdb.org/43228
• https://bugzilla.redhat.com/show_bug.cgi?id=356471
• https://issues.rpath.com/browse/RPL-2023