CVE-2007-0472
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files...
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
Exploit likelihood
What each source reports
NVD Score used
3.7
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
CVE-2007-0472- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
CVE-2007-0472- Updated
- 2026-11-02
EUVDEUVD-2007-0470 No score
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
EUVD-2007-0470- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-85rq-5m59-vj3c No score
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files...
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
GHSA-85rq-5m59-vj3c- Updated
- 2026-11-02
OSV No score
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
CVE-2007-0472- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0472 No score
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
- Record
DEBIAN-CVE-2007-0472- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0472 is a low vulnerability (CVSS 3.7) in Smb4k, published February 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in smb4k 0.8.0-1.
References
secunia.com/advisories/23984
lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html
lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html
developer.berlios.de/project/shownotes.php?release_id=9777
securityfocus.com/bid/22299
secunia.com/advisories/24111
Show 11 moreShow less
secunia.com/advisories/24469
vupen.com/english/advisories/2007/0393
gentoo.org/security/en/glsa/glsa-200703-09.xml
secunia.com/advisories/23937
developer.berlios.de/project/shownotes.php?release_id=11902
developer.berlios.de/project/shownotes.php?release_id=11706
developer.berlios.de/bugs?func=detailbug&bug_id=9630&group_id=769
mandriva.com/security/advisories?name=MDKSA-2007:042
nvd.nist.gov/vuln/detail/CVE-2007-0472
github.com/advisories/GHSA-85rq-5m59-vj3c
security-tracker.debian.org/tracker/CVE-2007-0472