Every CVE Search/ Get API key

CVE-2007-5718

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new...

4.9 MediumFix available

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Exploit likelihood

0.35%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:C/A:N
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
Updated
2026-11-02
EUVDEUVD-2007-5689 No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
EUVD-2007-5689
Updated
2026-11-03
GitHub AdvisoriesGHSA-63rc-vm2w-wg97 No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new...

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
GHSA-63rc-vm2w-wg97
Weakness
CWE-59
Updated
2026-11-02
OSV No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
Updated
2026-11-02
OSVDEBIAN-CVE-2007-5718 No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
DEBIAN-CVE-2007-5718
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vobcopy
Debian:12
before 1.0.2-1
1.0.2-1
vobcopy
Debian:13
before 1.0.2-1
1.0.2-1
vobcopy
Debian:14
before 1.0.2-1
1.0.2-1

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5718 is a medium vulnerability (CVSS 4.9) in Vobcopy, published October 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in vobcopy 1.0.2-1.

References

Show 4 moreShow less
MoveEnter Open