Vulnerabilities > CVE-2007-2839 - Unspecified vulnerability in Debian Gfax 0.4.2
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 2 |
Exploit-Db
description | GFax 0.7.6 Temporary Files Local Arbitrary Command Execution Vulnerability. CVE-2007-2839. Local exploit for linux platform |
id | EDB-ID:30280 |
last seen | 2016-02-03 |
modified | 2007-07-05 |
published | 2007-07-05 |
reporter | Steve Kemp |
source | https://www.exploit-db.com/download/30280/ |
title | GFax 0.7.6 Temporary Files Local Arbitrary Command Execution Vulnerability |
Nessus
NASL family | Debian Local Security Checks |
NASL id | DEBIAN_DSA-1329.NASL |
description | Steve Kemp from the Debian Security Audit project discovered that gfax, a GNOME frontend for fax programs, uses temporary files in an unsafe manner which may be exploited to execute arbitrary commands with the privileges of the root user. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 25676 |
published | 2007-07-10 |
reporter | This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/25676 |
title | Debian DSA-1329-1 : gfax - insecure temporary files |
References
- http://osvdb.org/37883
- http://osvdb.org/37883
- http://secunia.com/advisories/25937
- http://secunia.com/advisories/25937
- http://secunia.com/advisories/25967
- http://secunia.com/advisories/25967
- http://www.debian.org/security/2007/dsa-1329
- http://www.debian.org/security/2007/dsa-1329
- http://www.securityfocus.com/bid/24780
- http://www.securityfocus.com/bid/24780
- http://www.securitytracker.com/id?1018335
- http://www.securitytracker.com/id?1018335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35403
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35403