Local Permission Escalation in X.Org X11 Font Server for Linux Distributions

CVE-2007-3103

What is CVE-2007-3103?

The init.d script for the X.Org X11 font server on multiple Linux distributions is susceptible to a local user privilege escalation. This vulnerability can be exploited through a symlink attack targeting the /tmp/.font-unix temporary file, enabling unauthorized users to modify the permissions of arbitrary files. Such an exploit can lead to significant security risks within affected systems, allowing malicious actors to gain access to sensitive information or resources.

References