CVE-2007-4998
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user...
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
Exploit likelihood
What each source reports
NVD Score used
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
CVE-2007-4998- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
CVE-2007-4998- Updated
- 2026-11-02
EUVDEUVD-2007-4979 No score
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
EUVD-2007-4979- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4337-x4h9-rx8j No score
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user...
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
GHSA-4337-x4h9-rx8j- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVAZL-34843 No score
CVE-2007-4998 affecting package kernel for versions less than 6.6.35.1-4
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
AZL-34843- Updated
- 2026-11-05
OSVAZL-6512 No score
CVE-2007-4998 affecting package kernel for versions less than 5.10.78.1-1
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
AZL-6512- Updated
- 2026-11-02
OSV No score
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
CVE-2007-4998- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4998 No score
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
- Record
DEBIAN-CVE-2007-4998- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| affected, aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4998 is a medium vulnerability (CVSS 6.9) in Linux Kernel, published January 31, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in kernel 6.6.35.1-4.