high7.2Public exploit code
CVE-2007-2839
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GFax 0.7.6 - Temporary Files Local Arbitrary Command Execution2007-07-05 · local · linux · Verified
Impact
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Gfax | through 0.4.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/37883
- http://secunia.com/advisories/25937
- http://secunia.com/advisories/25967
- http://www.debian.org/security/2007/dsa-1329
- http://www.securityfocus.com/bid/24780
- http://www.securitytracker.com/id?1018335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35403
- http://osvdb.org/37883
- http://secunia.com/advisories/25937
- http://secunia.com/advisories/25967
- http://www.debian.org/security/2007/dsa-1329
- http://www.securityfocus.com/bid/24780
- http://www.securitytracker.com/id?1018335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35403