CVE-2007-0476

MEDIUM · CVSS 4.6 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2007-0476

Severity

MEDIUM

CVSS

4.6

EPSS

0.35%

Linux

Original NVD Description

The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.