Every CVESearch/Get API key

CVE-2007-5718

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new...

4.9 MediumFix available

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Exploit likelihood

0.35%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.9

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:C/A:N
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
Updated
2026-11-02
EUVDEUVD-2007-5689No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
EUVD-2007-5689
Updated
2026-11-03
GitHub AdvisoriesGHSA-63rc-vm2w-wg97No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new...

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
GHSA-63rc-vm2w-wg97
Weakness
CWE-59
Updated
2026-11-02
OSVNo score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
CVE-2007-5718
Updated
2026-11-02
OSVDEBIAN-CVE-2007-5718No score

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Record
DEBIAN-CVE-2007-5718
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vobcopy
Debian:12
before 1.0.2-1
1.0.2-1
vobcopy
Debian:13
before 1.0.2-1
1.0.2-1
vobcopy
Debian:14
before 1.0.2-1
1.0.2-1

History

History
RecordedChangedSources
facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5718 is a medium vulnerability (CVSS 4.9) in Vobcopy, published October 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in vobcopy 1.0.2-1.

References

Show 4 moreShow less
MoveEnter Open