PT-2007-7030 · Unknown · Scanbuttond

Published 2007-11-26 · Updated 2011-03-08 · CVE-2007-6131

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions scanbuttond version 0.2.3

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files created by buttonpressed.sh in scanbuttond.

Recommendations For scanbuttond version 0.2.3, consider restricting access to the temporary files scan.pnm and scan.jpg to prevent a symlink attack until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-6131

Affected Products

Scanbuttond

References · 7

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=383131 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6131 · Security Note
• http://secunia.com/advisories/27847 · Note
• http://securityfocus.com/bid/26617 · Note
• http://osvdb.org/42422 · Note
• http://vupen.com/english/advisories/2007/4024 · Note
• http://securitytracker.com/id?1019007 · Note