DEBIAN-CVE-2007-0472

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2007-0472
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-0472.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2007-0472
Upstream
Published
2007-02-03T23:28:00Z
Modified
2026-04-28T20:09:28.792982Z
Summary
[none]
Details

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

References

Affected packages

Debian:11 / smb4k

Package

Name
smb4k
Purl
pkg:deb/debian/smb4k?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.0-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-0472.json"

Debian:12 / smb4k

Package

Name
smb4k
Purl
pkg:deb/debian/smb4k?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.0-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-0472.json"

Debian:13 / smb4k

Package

Name
smb4k
Purl
pkg:deb/debian/smb4k?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.0-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-0472.json"

Debian:14 / smb4k

Package

Name
smb4k
Purl
pkg:deb/debian/smb4k?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.8.0-1

Ecosystem specific 

{
    "urgency": "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-0472.json"