CVE-2007-5207

Published: 4 October 2007

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.

Priority

Package	Release	Status
guilt Launchpad, Ubuntu, Debian	dapper	Does not exist
	edgy	Does not exist
	feisty	Does not exist
	gutsy	Ignored (end of life, was needed)
	hardy	Not vulnerable (0.28-1)
	intrepid	Not vulnerable (0.28-1)
	upstream	Released (0.27-1.2)

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.