Skip to content
OpenAdvisories
Unscored DSA-1402-1 1 CVE

gforge - insecure temporary files

Published Nov 8, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 gforge 3.1-31sarge4
Debian · 4.0 gforge 4.5.14-22etch3

Vulnerabilities 1

  • Unscored —
    CVE-2007-3921

    gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.