CVE-2007-5936

{"id": "CVE-2007-5936", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-11-13T22:46:00.000", "references": [{"url": "http://bugs.gentoo.org/attachment.cgi?id=135423", "source": "cve@mitre.org"}, {"url": "http://bugs.gentoo.org/show_bug.cgi?id=198238", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/42238", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27672", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27686", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27718", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27743", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27967", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28107", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28412", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/30168", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200711-26.xml", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200711-34.xml", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200805-13.xml", "source": "cve@mitre.org"}, {"url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266", "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:230", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/487984/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26469", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019058", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3896", "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=368611", "source": "cve@mitre.org"}, {"url": "https://issues.rpath.com/browse/RPL-1928", "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/554-1/", "source": "cve@mitre.org"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place."}, {"lang": "es", "value": "dvips en teTex y TeXlive 2007 y anteriores permite a usuarios locales obtener informaci\u00f3n sensible y modificar ciertos datos a trav\u00e9s de la creaci\u00f3n de ciertos archivos temporales antes de que sean procesados por dviljk, lo cual permite que puedan ser leidos o modificados en el lugar."}], "lastModified": "2018-10-15T21:47:21.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87CCAA71-B817-48A0-81C0-9E4DC4953C9C"}, {"criteria": "cpe:2.3:a:tug:texlive_2007:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B01AD712-1D5C-49B6-AF51-4A4A2BA3FD83"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Not vulnerable.\n\nteTeX is packaged without the dviljk binary in Red Hat Enterprise Linux, making it impossible to exploit this flaw. We are however including this fix in RHSA-2010:0399, RHSA-2010:0400, and RHSA-2010:0401 in the event the binary is shipped in the future.", "lastModified": "2010-05-06T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}