CVE-2007-2838: Gsambad

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file.

Affected products

• Gsambad Gsambad: version 0.1.4 only

Published 2007-07-03. Last modified 2026-06-16.