Skip to content

CVE-2007-3852

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely,...

4.4 MediumFix available

CVE-2007-3852 is a medium vulnerability (CVSS 4.4) in Sysstat, published August 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in sysstat 0:7.0.2-11.el5.

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Exploit likelihood

0.42%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.4

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Record: CVE-2007-3852
CVSS 2.0: 4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Record: CVE-2007-3852
Updated: 2026-11-02

EUVDEUVD-2007-3836 No score

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Record: EUVD-2007-3836
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r5hc-32f3-wh4r No score

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely,...

The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.

Record: GHSA-r5hc-32f3-wh4r
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11419-1 No score

sysstat-12.4.3-3.2 on GA media

These are all security issues fixed in the sysstat-12.4.3-3.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11419-1
Updated: 2026-11-02

Affected products

sysstat

Affected packages

Affected packages
Package	Affected	Fixed
`sysstat` Red Hat:enterprise_linux:5::client	before 0:7.0.2-11.el5	0:7.0.2-11.el5
`sysstat-debuginfo` Red Hat:enterprise_linux:5::client	before 0:7.0.2-11.el5	0:7.0.2-11.el5
`sysstat` Red Hat:enterprise_linux:5::server	before 0:7.0.2-11.el5	0:7.0.2-11.el5
`sysstat-debuginfo` Red Hat:enterprise_linux:5::server	before 0:7.0.2-11.el5	0:7.0.2-11.el5
`sysstat` openSUSE:Tumbleweed	before 12.4.3-3.2	12.4.3-3.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	affected, aliases, facts, references, title	GitHub Advisories, OSV
2026-11-02	created	CVE List, NVD

References

Show 26 moreShow less