CVE-2007-1500

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-19 · updated 2026-06-16

Description

The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat.

Affected products

gentoo Linux: all versions

References

http://bugs.gentoo.org/show_bug.cgi?id=159542
http://osvdb.org/34267
http://secunia.com/advisories/24526
http://security.gentoo.org/glsa/glsa-200703-20.xml
http://www.securityfocus.com/bid/23014
https://exchange.xforce.ibmcloud.com/vulnerabilities/33057
http://bugs.gentoo.org/show_bug.cgi?id=159542
http://osvdb.org/34267
http://secunia.com/advisories/24526
http://security.gentoo.org/glsa/glsa-200703-20.xml
http://www.securityfocus.com/bid/23014
https://exchange.xforce.ibmcloud.com/vulnerabilities/33057

Get alerted when CVE-2007-1500 or the next vulnerability affects your stack