CVE catalog

CVE-2007-0472

DEBIAN-CVE-2007-0472

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansmb4k130.8.0-1fixed
Debiansmb4k140.8.0-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansmb4kdeb130.8.0-1Not reportedDEBIAN-CVE-2007-0472Not reported
Debiansmb4kdeb140.8.0-1Not reportedDEBIAN-CVE-2007-0472Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 13 (Trixie)]

  • [smb4k]Unknown
    Details (4)

    • 4.0.0-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 0.8.0-1

      pypi · smb4k · debian · 13

    • 4.0.0-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 0.8.0-1

      pypi · smb4k · debian · 13

    • 4.0.0-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 0.8.0-1

      pypi · smb4k · debian · 13

    • 4.0.0-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 0.8.0-1

      pypi · smb4k · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]