Lucene search
HistoryMar 04, 2008 - 12:44 a.m.
CVE-2008-0931
cve-2008-0931
xwine
debian
linux
insecure permissions
arbitrary commands
denial of service
nvd
7.5 High
AI Score
Confidence
High
6.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modifying the file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xwine:xwine | xwine | eq | 1.0.1 |
Related
prion
prion
Design/Logic Flaw
2008-03-04 00:44:00
nessus
nessus
Debian DSA-1526-1 : xwine - several vulnerabilities
2008-03-21 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1526-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DSA 1522-1] New xwine packages fix several vulnerabilities
2008-03-20 19:09:52
securityvulns
securityvulns
XWine WINE graphical interface multiple security vulnerabilities
2008-03-20 00:00:00
[SECURITY] [DSA 1522-1] New xwine packages fix several vulnerabilities
2008-03-20 00:00:00
osv
osv
xwine
2008-03-20 00:00:00
7.5 High
AI Score
Confidence
High
6.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2008-0931