CVE-2007-3103
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow...
6.2 MediumPublic exploitFix available
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
Exploit likelihood
0.90%Down 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
- Record
CVE-2007-3103- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
- Record
CVE-2007-3103- Updated
- 2026-11-02
EUVDEUVD-2007-3095 No score
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
- Record
EUVD-2007-3095- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9vrx-rxrx-2pgp No score
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow...
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
- Record
GHSA-9vrx-rxrx-2pgp- Weakness
- CWE-59
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xfsDebian:4.0 |
before 1:1.0.1-6, plus listed versions 1:1.0.1-5 |
1:1.0.1-6 |
xorg-x11Red Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XnestRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-develRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xorg-x11-docRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-libsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-sdkRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-toolsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-twmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xauthRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xdmRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xfsRed Hat:enterprise_linux:4::as |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11Red Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XnestRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-develRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-docRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-libsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-sdkRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-toolsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-twmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xauthRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xdmRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xfsRed Hat:enterprise_linux:4::desktop |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11Red Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XnestRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-develRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-docRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-libsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-sdkRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-toolsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-twmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xauthRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xdmRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xfsRed Hat:enterprise_linux:4::es |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11Red Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-Mesa-libGLURed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XdmxRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XnestRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-XvfbRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-deprecated-libs-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-develRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-docRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-font-utilsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-libsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-sdkRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-toolsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-twmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xauthRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xdmRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xfsRed Hat:enterprise_linux:4::ws |
before 0:6.8.2-1.EL.19 | 0:6.8.2-1.EL.19 |
xorg-x11-xfsRed Hat:enterprise_linux:5::client |
before 1:1.0.2-4 | 1:1.0.2-4 |
xorg-x11-xfs-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.0.2-4 | 1:1.0.2-4 |
xorg-x11-xfs-utilsRed Hat:enterprise_linux:5::client |
before 1:1.0.2-4 | 1:1.0.2-4 |
xorg-x11-xfsRed Hat:enterprise_linux:5::server |
before 1:1.0.2-4 | 1:1.0.2-4 |
xorg-x11-xfs-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.0.2-4 | 1:1.0.2-4 |
xorg-x11-xfs-utilsRed Hat:enterprise_linux:5::server |
before 1:1.0.2-4 | 1:1.0.2-4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition | 2008-02-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3103 is a medium vulnerability (CVSS 6.2) in Redhat Linux, published July 15, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in xfs 1:1.0.1-6.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802
secunia.com/advisories/35674
securityfocus.com/bid/24888
redhat.com/support/errata/RHSA-2007-0520.html
debian.org/security/2007/dsa-1342
Show 28 moreShow less
issues.rpath.com/browse/RPL-1485
exploit-db.com/exploits/5167
securitytracker.com/id?1018375
security.gentoo.org/glsa/glsa-200710-11.xml
bugzilla.redhat.com/242903
exchange.xforce.ibmcloud.com/vulnerabilities/35375
labs.idefense.com/intelligence/vulnerabilities/display.php?id=557
osvdb.org/40945
bugs.gentoo.org/show_bug.cgi?id=185660
nvd.nist.gov/vuln/detail/CVE-2007-3103
github.com/advisories/GHSA-9vrx-rxrx-2pgp
access.redhat.com/errata/RHSA-2007:0519
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0519.json
cve.org/CVERecord?id=CVE-2007-3103