CVE-2007-4998

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2007-4998

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2007-4998.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2007-4998

Downstream

MINI-8jgf-pwp4-8h7m

Published

2008-01-31T21:00:00Z

Modified

2025-04-09T00:30:58Z

Summary

[none]

Details

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.

References

Affected packages

Debian:11 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / coreutils

Package

Name: coreutils
Purl: pkg:deb/debian/coreutils?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.2

Ecosystem specific

{
    "urgency": "not yet assigned"
}