{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Solaris 11.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Solaris 10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-1789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1789"
    },
    {
      "name": "CVE-2002-2443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2002-2443"
    },
    {
      "name": "CVE-2013-4073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4073"
    },
    {
      "name": "CVE-2010-1322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1322"
    },
    {
      "name": "CVE-2013-4921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4921"
    },
    {
      "name": "CVE-2013-1989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1989"
    },
    {
      "name": "CVE-2011-2939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2939"
    },
    {
      "name": "CVE-2013-4935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4935"
    },
    {
      "name": "CVE-2010-4020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4020"
    },
    {
      "name": "CVE-2013-4920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4920"
    },
    {
      "name": "CVE-2013-1985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1985"
    },
    {
      "name": "CVE-2008-7247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-7247"
    },
    {
      "name": "CVE-2013-2001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2001"
    },
    {
      "name": "CVE-2008-4098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4098"
    },
    {
      "name": "CVE-2010-1158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1158"
    },
    {
      "name": "CVE-2012-5526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5526"
    },
    {
      "name": "CVE-2012-0260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0260"
    },
    {
      "name": "CVE-2013-2003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2003"
    },
    {
      "name": "CVE-2013-1983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1983"
    },
    {
      "name": "CVE-2013-1987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1987"
    },
    {
      "name": "CVE-2013-4083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4083"
    },
    {
      "name": "CVE-2012-6139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6139"
    },
    {
      "name": "CVE-2012-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1798"
    },
    {
      "name": "CVE-2013-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2004"
    },
    {
      "name": "CVE-2013-1982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1982"
    },
    {
      "name": "CVE-2013-4925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4925"
    },
    {
      "name": "CVE-2013-1998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1998"
    },
    {
      "name": "CVE-2013-1997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1997"
    },
    {
      "name": "CVE-2013-3560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3560"
    },
    {
      "name": "CVE-2013-2064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2064"
    },
    {
      "name": "CVE-2013-1415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1415"
    },
    {
      "name": "CVE-2013-4926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4926"
    },
    {
      "name": "CVE-2013-1992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1992"
    },
    {
      "name": "CVE-2013-1988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1988"
    },
    {
      "name": "CVE-2012-5581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5581"
    },
    {
      "name": "CVE-2013-1993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1993"
    },
    {
      "name": "CVE-2013-2487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2487"
    },
    {
      "name": "CVE-2010-4021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4021"
    },
    {
      "name": "CVE-2013-4930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4930"
    },
    {
      "name": "CVE-2013-4928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4928"
    },
    {
      "name": "CVE-2013-3556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3556"
    },
    {
      "name": "CVE-2012-1016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1016"
    },
    {
      "name": "CVE-2005-0448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0448"
    },
    {
      "name": "CVE-2013-3555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3555"
    },
    {
      "name": "CVE-2013-4933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4933"
    },
    {
      "name": "CVE-2012-0259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0259"
    },
    {
      "name": "CVE-2013-3558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3558"
    },
    {
      "name": "CVE-2013-1984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1984"
    },
    {
      "name": "CVE-2013-3559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3559"
    },
    {
      "name": "CVE-2013-4923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4923"
    },
    {
      "name": "CVE-2013-4929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4929"
    },
    {
      "name": "CVE-2013-2067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2067"
    },
    {
      "name": "CVE-2013-2002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2002"
    },
    {
      "name": "CVE-2013-1981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1981"
    },
    {
      "name": "CVE-2012-5195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5195"
    },
    {
      "name": "CVE-2013-3557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3557"
    },
    {
      "name": "CVE-2004-0452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2004-0452"
    },
    {
      "name": "CVE-2013-1619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1619"
    },
    {
      "name": "CVE-2013-1999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1999"
    },
    {
      "name": "CVE-2013-4931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4931"
    },
    {
      "name": "CVE-2010-1324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1324"
    },
    {
      "name": "CVE-2013-4932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4932"
    },
    {
      "name": "CVE-2012-4481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4481"
    },
    {
      "name": "CVE-2013-3562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3562"
    },
    {
      "name": "CVE-2010-1626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1626"
    },
    {
      "name": "CVE-2013-1996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1996"
    },
    {
      "name": "CVE-2013-1990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1990"
    },
    {
      "name": "CVE-2012-3499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3499"
    },
    {
      "name": "CVE-2005-0156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0156"
    },
    {
      "name": "CVE-2013-1861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1861"
    },
    {
      "name": "CVE-2013-1788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1788"
    },
    {
      "name": "CVE-2013-4927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4927"
    },
    {
      "name": "CVE-2013-4936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4936"
    },
    {
      "name": "CVE-2011-1005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1005"
    },
    {
      "name": "CVE-2011-0284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0284"
    },
    {
      "name": "CVE-2013-1862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1862"
    },
    {
      "name": "CVE-2013-4924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4924"
    },
    {
      "name": "CVE-2013-2066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2066"
    },
    {
      "name": "CVE-2010-1323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1323"
    },
    {
      "name": "CVE-2013-2062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2062"
    },
    {
      "name": "CVE-2013-2005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2005"
    },
    {
      "name": "CVE-2013-2063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2063"
    },
    {
      "name": "CVE-2013-2486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2486"
    },
    {
      "name": "CVE-2012-3544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3544"
    },
    {
      "name": "CVE-2013-3561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3561"
    },
    {
      "name": "CVE-2013-4934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4934"
    },
    {
      "name": "CVE-2013-1986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1986"
    },
    {
      "name": "CVE-2013-4922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-4922"
    },
    {
      "name": "CVE-2013-1790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1790"
    },
    {
      "name": "CVE-2013-1896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1896"
    },
    {
      "name": "CVE-2013-2000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2000"
    },
    {
      "name": "CVE-2013-1995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1995"
    },
    {
      "name": "CVE-2012-1610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1610"
    },
    {
      "name": "CVE-2013-2116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2116"
    },
    {
      "name": "CVE-2012-6095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6095"
    },
    {
      "name": "CVE-2005-4278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-4278"
    },
    {
      "name": "CVE-2007-4460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4460"
    }
  ],
  "initial_release_date": "2013-09-25T00:00:00",
  "last_revision_date": "2013-09-25T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-543",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-09-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eOracle Solaris\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Solaris",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 24 septembre 2013",
      "url": "http://www.oracle.com/technetwork/topics/security/thirdparty-patch-map-1482893.html"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2007-4460",
    "description": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.",
    "id": "GSD-2007-4460",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-4460.html",
      "https://www.debian.org/security/2007/dsa-1365"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-4460"
      ],
      "details": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.",
      "id": "GSD-2007-4460",
      "modified": "2023-12-13T01:21:37.044782Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-4460",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540"
          },
          {
            "name": "26646",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26646"
          },
          {
            "name": "SUSE-SR:2007:019",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "name": "26818",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26818"
          },
          {
            "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553"
          },
          {
            "name": "26536",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26536"
          },
          {
            "name": "MDKSA-2007:180",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:180"
          },
          {
            "name": "26987",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "name": "25372",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/25372"
          },
          {
            "name": "GLSA-200709-08",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200709-08.xml"
          },
          {
            "name": "1018667",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018667"
          },
          {
            "name": "26793",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26793"
          },
          {
            "name": "DSA-1365",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2007/dsa-1365"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:id3lib:id3lib:3.8.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4460"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553"
            },
            {
              "name": "25372",
              "refsource": "BID",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.securityfocus.com/bid/25372"
            },
            {
              "name": "26536",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/26536"
            },
            {
              "name": "DSA-1365",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2007/dsa-1365"
            },
            {
              "name": "GLSA-200709-08",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200709-08.xml"
            },
            {
              "name": "MDKSA-2007:180",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:180"
            },
            {
              "name": "SUSE-SR:2007:019",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
            },
            {
              "name": "1018667",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018667"
            },
            {
              "name": "26646",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26646"
            },
            {
              "name": "26793",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26793"
            },
            {
              "name": "26818",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26818"
            },
            {
              "name": "26987",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26987"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2008-09-05T21:28Z",
      "publishedDate": "2007-08-21T21:17Z"
    }
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2007-4460"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-08-21T21:17:00Z",
    "severity": "HIGH"
  },
  "details": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.",
  "id": "GHSA-9j28-rgm8-rqw2",
  "modified": "2022-05-01T18:23:54Z",
  "published": "2022-05-01T18:23:54Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4460"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26536"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26646"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26793"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26818"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200709-08.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2007/dsa-1365"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:180"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/25372"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018667"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "id3lib-3.8.3-266.5 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the id3lib-3.8.3-266.5 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10082",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10082-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-4460 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-4460/"
      }
    ],
    "title": "id3lib-3.8.3-266.5 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10082-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "id3lib-3.8.3-266.5.aarch64",
                "product": {
                  "name": "id3lib-3.8.3-266.5.aarch64",
                  "product_id": "id3lib-3.8.3-266.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-32bit-3.8.3-266.5.aarch64",
                "product": {
                  "name": "id3lib-32bit-3.8.3-266.5.aarch64",
                  "product_id": "id3lib-32bit-3.8.3-266.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-devel-3.8.3-266.5.aarch64",
                "product": {
                  "name": "id3lib-devel-3.8.3-266.5.aarch64",
                  "product_id": "id3lib-devel-3.8.3-266.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-examples-3.8.3-266.5.aarch64",
                "product": {
                  "name": "id3lib-examples-3.8.3-266.5.aarch64",
                  "product_id": "id3lib-examples-3.8.3-266.5.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "id3lib-3.8.3-266.5.ppc64le",
                "product": {
                  "name": "id3lib-3.8.3-266.5.ppc64le",
                  "product_id": "id3lib-3.8.3-266.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-32bit-3.8.3-266.5.ppc64le",
                "product": {
                  "name": "id3lib-32bit-3.8.3-266.5.ppc64le",
                  "product_id": "id3lib-32bit-3.8.3-266.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-devel-3.8.3-266.5.ppc64le",
                "product": {
                  "name": "id3lib-devel-3.8.3-266.5.ppc64le",
                  "product_id": "id3lib-devel-3.8.3-266.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-examples-3.8.3-266.5.ppc64le",
                "product": {
                  "name": "id3lib-examples-3.8.3-266.5.ppc64le",
                  "product_id": "id3lib-examples-3.8.3-266.5.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "id3lib-3.8.3-266.5.s390x",
                "product": {
                  "name": "id3lib-3.8.3-266.5.s390x",
                  "product_id": "id3lib-3.8.3-266.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-32bit-3.8.3-266.5.s390x",
                "product": {
                  "name": "id3lib-32bit-3.8.3-266.5.s390x",
                  "product_id": "id3lib-32bit-3.8.3-266.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-devel-3.8.3-266.5.s390x",
                "product": {
                  "name": "id3lib-devel-3.8.3-266.5.s390x",
                  "product_id": "id3lib-devel-3.8.3-266.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-examples-3.8.3-266.5.s390x",
                "product": {
                  "name": "id3lib-examples-3.8.3-266.5.s390x",
                  "product_id": "id3lib-examples-3.8.3-266.5.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "id3lib-3.8.3-266.5.x86_64",
                "product": {
                  "name": "id3lib-3.8.3-266.5.x86_64",
                  "product_id": "id3lib-3.8.3-266.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-32bit-3.8.3-266.5.x86_64",
                "product": {
                  "name": "id3lib-32bit-3.8.3-266.5.x86_64",
                  "product_id": "id3lib-32bit-3.8.3-266.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-devel-3.8.3-266.5.x86_64",
                "product": {
                  "name": "id3lib-devel-3.8.3-266.5.x86_64",
                  "product_id": "id3lib-devel-3.8.3-266.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "id3lib-examples-3.8.3-266.5.x86_64",
                "product": {
                  "name": "id3lib-examples-3.8.3-266.5.x86_64",
                  "product_id": "id3lib-examples-3.8.3-266.5.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-3.8.3-266.5.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-3.8.3-266.5.aarch64"
        },
        "product_reference": "id3lib-3.8.3-266.5.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-3.8.3-266.5.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-3.8.3-266.5.ppc64le"
        },
        "product_reference": "id3lib-3.8.3-266.5.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-3.8.3-266.5.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-3.8.3-266.5.s390x"
        },
        "product_reference": "id3lib-3.8.3-266.5.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-3.8.3-266.5.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-3.8.3-266.5.x86_64"
        },
        "product_reference": "id3lib-3.8.3-266.5.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-32bit-3.8.3-266.5.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.aarch64"
        },
        "product_reference": "id3lib-32bit-3.8.3-266.5.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-32bit-3.8.3-266.5.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.ppc64le"
        },
        "product_reference": "id3lib-32bit-3.8.3-266.5.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-32bit-3.8.3-266.5.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.s390x"
        },
        "product_reference": "id3lib-32bit-3.8.3-266.5.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-32bit-3.8.3-266.5.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.x86_64"
        },
        "product_reference": "id3lib-32bit-3.8.3-266.5.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-devel-3.8.3-266.5.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.aarch64"
        },
        "product_reference": "id3lib-devel-3.8.3-266.5.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-devel-3.8.3-266.5.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.ppc64le"
        },
        "product_reference": "id3lib-devel-3.8.3-266.5.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-devel-3.8.3-266.5.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.s390x"
        },
        "product_reference": "id3lib-devel-3.8.3-266.5.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-devel-3.8.3-266.5.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.x86_64"
        },
        "product_reference": "id3lib-devel-3.8.3-266.5.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-examples-3.8.3-266.5.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.aarch64"
        },
        "product_reference": "id3lib-examples-3.8.3-266.5.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-examples-3.8.3-266.5.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.ppc64le"
        },
        "product_reference": "id3lib-examples-3.8.3-266.5.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-examples-3.8.3-266.5.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.s390x"
        },
        "product_reference": "id3lib-examples-3.8.3-266.5.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "id3lib-examples-3.8.3-266.5.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.x86_64"
        },
        "product_reference": "id3lib-examples-3.8.3-266.5.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-4460",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-4460"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:id3lib-3.8.3-266.5.aarch64",
          "openSUSE Tumbleweed:id3lib-3.8.3-266.5.ppc64le",
          "openSUSE Tumbleweed:id3lib-3.8.3-266.5.s390x",
          "openSUSE Tumbleweed:id3lib-3.8.3-266.5.x86_64",
          "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.aarch64",
          "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.ppc64le",
          "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.s390x",
          "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.x86_64",
          "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.aarch64",
          "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.ppc64le",
          "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.s390x",
          "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.x86_64",
          "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.aarch64",
          "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.ppc64le",
          "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.s390x",
          "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-4460",
          "url": "https://www.suse.com/security/cve/CVE-2007-4460"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 307073 for CVE-2007-4460",
          "url": "https://bugzilla.suse.com/307073"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:id3lib-3.8.3-266.5.aarch64",
            "openSUSE Tumbleweed:id3lib-3.8.3-266.5.ppc64le",
            "openSUSE Tumbleweed:id3lib-3.8.3-266.5.s390x",
            "openSUSE Tumbleweed:id3lib-3.8.3-266.5.x86_64",
            "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.aarch64",
            "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.ppc64le",
            "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.s390x",
            "openSUSE Tumbleweed:id3lib-32bit-3.8.3-266.5.x86_64",
            "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.aarch64",
            "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.ppc64le",
            "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.s390x",
            "openSUSE Tumbleweed:id3lib-devel-3.8.3-266.5.x86_64",
            "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.aarch64",
            "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.ppc64le",
            "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.s390x",
            "openSUSE Tumbleweed:id3lib-examples-3.8.3-266.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-4460"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:id3lib:id3lib:3.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "656BE75F-9268-4F80-A16D-7680E33A3522",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n RenderV2ToFile en tag_file.cpp de id3lib (tambi\u00e9n conocida como libid3) 3.8.3 permite a usuarios locales sobrescribir archivos de su elecci\u00f3n mediante un ataque de enlace simb\u00f3lico en un archivo temporal cuyo nombre se construye a partir del nombre de un archivo que est\u00e1 siendo etiquetado."
    }
  ],
  "id": "CVE-2007-4460",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-08-21T21:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26536"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26646"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26793"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26818"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200709-08.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2007/dsa-1365"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:180"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25372"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018667"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26646"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26793"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26818"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26987"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200709-08.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2007/dsa-1365"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:180"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018667"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}