Every CVE Search/ Get API key

CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files...

3.7 LowFix available

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Exploit likelihood

0.36%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.7

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
CVE-2007-0472
CVSS 2.0
3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
CVE-2007-0472
Updated
2026-11-02
EUVDEUVD-2007-0470 No score

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
EUVD-2007-0470
Updated
2026-11-03
GitHub AdvisoriesGHSA-85rq-5m59-vj3c No score

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files...

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
GHSA-85rq-5m59-vj3c
Updated
2026-11-02
OSV No score

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
CVE-2007-0472
Updated
2026-11-02
OSVDEBIAN-CVE-2007-0472 No score

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Record
DEBIAN-CVE-2007-0472
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
smb4k
Debian:13
before 0.8.0-1
0.8.0-1
smb4k
Debian:14
before 0.8.0-1
0.8.0-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0472 is a low vulnerability (CVSS 3.7) in Smb4k, published February 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in smb4k 0.8.0-1.

References

Show 11 moreShow less
MoveEnter Open