CVE-2007-1444
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack...
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
Exploit likelihood
What each source reports
NVD Score used
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
CVE-2007-1444- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
CVE-2007-1444- Updated
- 2026-11-02
EUVDEUVD-2007-1438 No score
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
EUVD-2007-1438- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vj4-2mmj-mr95 No score
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack...
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
GHSA-9vj4-2mmj-mr95- Updated
- 2026-11-02
OSV No score
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
CVE-2007-1444- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1444 No score
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
- Record
DEBIAN-CVE-2007-1444- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
netperfDebian:12 |
before 2.4.3-8, plus listed versions 2.1pl3-12.2pl4-12.3-12.3-32.3-4 Show 11 moreShow less2.4.0-12.4.0-1bpo12.4.0-22.4.1-12.4.2-12.4.3-12.4.3-22.4.3-32.4.3-52.4.3-62.4.3-7 |
2.4.3-8 |
netperfDebian:13 |
before 2.4.3-8 | 2.4.3-8 |
netperfDebian:14 |
before 2.4.3-8 | 2.4.3-8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1444 is a medium vulnerability (CVSS 4.4) in Netperf, published March 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in netperf 2.4.3-8.