CVE-2007-3919

MediumCVSS 6.0/10Last modified Jun 16, 2026

Description

(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.

Metrics

CVSS 2.0 6.0/10AV:L/AC:M/Au:S/C:N/I:C/A:C

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-39206.2GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical acCVE-2007-39213.3gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.CVE-2007-39226.8Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through CVE-2007-39237.8The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appCVE-2007-39249.3Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registeredCVE-2007-39256.5Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users toCVE-2007-39267.8Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involvCVE-2007-392710.0Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified CVE-2007-39287.6Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address CVE-2007-39299.3Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code CVE-2007-39304.3Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaCVE-2007-39314.4The wrap_setuid_third_party_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions
CVE-2007-3919: Medium severity, CVSS 6.0 | Vulnix