{ "schema_version": "1.4.0", "id": "GHSA-v5xm-v4c7-6hcj", "modified": "2022-05-01T18:37:11Z", "published": "2022-05-01T18:37:11Z", "aliases": [ "CVE-2007-5839" ], "details": "The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5839" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38262" }, { "type": "WEB", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449149" }, { "type": "WEB", "url": "http://osvdb.org/42061" }, { "type": "WEB", "url": "http://secunia.com/advisories/27463" }, { "type": "WEB", "url": "http://secunia.com/advisories/31180" }, { "type": "WEB", "url": "http://secunia.com/advisories/34870" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200807-12.xml" }, { "type": "WEB", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/26326" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/3714" } ], "database_specific": { "cwe_ids": [ "CWE-59" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2007-11-06T19:46:00Z" } }