{"schemaVersion":3,"id":"CVE-2007-4998","aliases":["DEBIAN-CVE-2007-4998","CGA-24vp-fwgv-244p","CGA-29rw-8q44-m294","CGA-3cm5-cxqj-5cr2","CGA-3hgx-62pr-mgf9","CGA-3jgp-58mc-9rj7","CGA-3qj7-mmpv-qm4f","CGA-49pv-hxqg-8886","CGA-4q43-8x7p-3qwj","CGA-5xg6-j26h-658r","CGA-63jh-r5rf-fp3w","CGA-7hwv-hxfr-9r96","CGA-8rjh-p94g-crm4","CGA-8wf8-vh2w-j27q","CGA-9wqj-354h-7qg5","CGA-fp7h-cxhr-j62c","CGA-fqgg-2mj6-8gx9","CGA-gmpx-4hf7-phxm","CGA-gpgw-86pj-frpf","CGA-h386-v84v-7m52","CGA-hm3x-5vfc-jfh4","CGA-hwjj-pv8x-q498","CGA-jpgv-wjg4-28qx","CGA-mqrm-h72q-6mpc","CGA-q3m8-xcqr-2gc3","CGA-qp4v-hxpp-352c","CGA-r2xm-7hc5-563m","CGA-r52v-qwm4-672v","CGA-r9g3-wh74-cx3v","CGA-rmvc-hhm3-w858","CGA-w5w8-26wm-43xq","CGA-w87j-pwfc-39qc","CGA-wpqq-qv5r-58cg","CGA-x8w2-3j2c-5qr9","CGA-xrx7-pqhj-x2mm","CGA-xv69-j2qw-2q4w"],"status":"published","duplicateOf":null,"title":null,"description":"cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.","dates":{"published":"2008-01-31T20:00:00.000Z","modified":"2024-08-07T15:17:27.992Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.9,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.9,"severity":"medium","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00347,"percentile":0.2689,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00347},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00347,"percentile":0.2689}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00347,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00347,"percentile":0.2689}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-59","name":"Improper Link Resolution Before File Access ('Link Following')","description":"The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/59.html"}],"affected":[{"vendor":"chainguard","product":"linux-aws-6.12","name":"linux-aws-6.12","label":"linux-aws-6.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-aws-6.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-aws-6.18","name":"linux-aws-6.18","label":"linux-aws-6.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-aws-6.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-aws-generic","name":"linux-aws-generic","label":"linux-aws-generic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-aws-generic","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-azure-6.12","name":"linux-azure-6.12","label":"linux-azure-6.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-azure-6.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-azure-6.18","name":"linux-azure-6.18","label":"linux-azure-6.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-azure-6.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-azure-generic","name":"linux-azure-generic","label":"linux-azure-generic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-azure-generic","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-gcp-6.12","name":"linux-gcp-6.12","label":"linux-gcp-6.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-gcp-6.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-gcp-6.18","name":"linux-gcp-6.18","label":"linux-gcp-6.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-gcp-6.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-gcp-generic","name":"linux-gcp-generic","label":"linux-gcp-generic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-gcp-generic","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-6.12","name":"linux-qemu-6.12","label":"linux-qemu-6.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-6.12","purlType":"apk","versions":[{"text":"< 6.12.67-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.12.67-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-6.18","name":"linux-qemu-6.18","label":"linux-qemu-6.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-6.18","purlType":"apk","versions":[{"text":"< 6.18.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.18.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-generic","name":"linux-qemu-generic","label":"linux-qemu-generic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-generic","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-rc","name":"linux-qemu-rc","label":"linux-qemu-rc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-rc","purlType":"apk","versions":[{"text":"< 6.17_rc5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.17_rc5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-rc-boot-installed","name":"linux-qemu-rc-boot-installed","label":"linux-qemu-rc-boot-installed","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-rc-boot-installed","purlType":"apk","versions":[{"text":"< 6.17_rc5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.17_rc5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-rc-fips-boot-installed","name":"linux-qemu-rc-fips-boot-installed","label":"linux-qemu-rc-fips-boot-installed","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-rc-fips-boot-installed","purlType":"apk","versions":[{"text":"< 6.17_rc5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.17_rc5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-rc-headers","name":"linux-qemu-rc-headers","label":"linux-qemu-rc-headers","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-rc-headers","purlType":"apk","versions":[{"text":"< 6.17_rc5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.17_rc5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-qemu-rc-modules","name":"linux-qemu-rc-modules","label":"linux-qemu-rc-modules","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-qemu-rc-modules","purlType":"apk","versions":[{"text":"< 6.17_rc5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.17_rc5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-vmware-6.18","name":"linux-vmware-6.18","label":"linux-vmware-6.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-vmware-6.18","purlType":"apk","versions":[{"text":"< 6.18.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.18.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"linux-vmware-generic","name":"linux-vmware-generic","label":"linux-vmware-generic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/linux-vmware-generic","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"coreutils","name":"coreutils","label":"coreutils","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/coreutils","purlType":"deb","versions":[{"text":"< 4.1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2","eol":null,"hubHref":null}],"affectedCount":20,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://issues.rpath.com/browse/RPL-2023","label":"issues.rpath.com/browse/RPL-2023","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=356471","label":"bugzilla.redhat.com/show_bug.cgi?id=356471","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM"]},{"url":"http://osvdb.org/43228","label":"osvdb.org/43228","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-4998","label":"security-tracker.debian.org/tracker/CVE-2007-4998","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4998","label":"nvd.nist.gov/vuln/detail/CVE-2007-4998","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-GP54-QG4W-PHC3","CGA-JWQH-4XX8-9PHV"]},"timeline":[{"kind":"published","date":"2008-01-31T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T15:17:27.992Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T04:56:58.599Z","stale":false,"partial":false}}