CVE-2007-4462
- Source
- https://cve.org/CVERecord?id=CVE-2007-4462
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2007-4462.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2007-4462
- Downstream
- Withdrawn
- 2026-01-27T04:08:06.060917Z
- Published
- 2007-08-21T21:17:00Z
- Modified
- 2026-01-27T04:08:06.060917Z
- Summary
- [none]
- Details
-
lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.
- References
-
- http://secunia.com/advisories/26492
- http://secunia.com/advisories/26810
- http://security.gentoo.org/glsa/glsa-200709-04.xml
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253541
- http://alioth.debian.org/frs/shownotes.php?release_id=1019
- http://bugs.gentoo.org/show_bug.cgi?id=189440
- http://www.securityfocus.com/bid/25402