CVE-2007-0473

The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc...

1.9 LowFix available

The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.

Exploit likelihood

0.38%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 1.9

Record: CVE-2007-0473
CVSS 2.0: 1.9 LowAV:L/AC:M/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-0473
Updated: 2026-11-02

EUVDEUVD-2007-0471 No score

Record: EUVD-2007-0471
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vxr8-957h-vvx8 No score

The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc...

Record: GHSA-vxr8-957h-vvx8
Updated: 2026-11-02

OSV No score

Record: CVE-2007-0473
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-0473 No score

Record: DEBIAN-CVE-2007-0473
Updated: 2026-11-02

Affected products

smb4k

Affected packages

Affected packages
Package	Affected	Fixed
`smb4k` Debian:13	before 0.8.0-1	0.8.0-1
`smb4k` Debian:14	before 0.8.0-1	0.8.0-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0473 is a low vulnerability (CVSS 1.9) in Smb4k, published February 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in smb4k 0.8.0-1.

References

Show 11 moreShow less