CVE-2007-4462

Low

3.3/10

Summary

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.

Access Complexity: MEDIUM
AccessVector: LOCAL
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: NONE
Availability Impact: PARTIAL

References

Advisory Timeline

Published Aug 21, 2007

CVE-2007-4462

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS