CVE-2007-3103: Fedoraproject Fedora Core

Medium severity, CVSS 6.2. EPSS: 0.9% chance of exploitation in the next 30 days.

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

Affected products

• Fedoraproject Fedora Core: version 6.0 only
• Red Hat Enterprise Linux: version 4.0 only
• Red Hat Enterprise Linux Desktop: version 4.0 only
• Red Hat Linux: any version

Published 2007-07-15. Last modified 2026-06-16.