Lucene search
HistoryJul 18, 2008 - 4:41 p.m.
CVE-2008-3216
cve-2008-3216
save function
prefmanager.d
projectl 1.001
symlink attack
nvd
6.3 Medium
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.
Affected configurations
Node
debianprojectlMatch1.001
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:projectl | debian projectl | eq | 1.001 |
Related
prion
prion
Code injection
2008-07-18 16:41:00
ubuntucve
ubuntucve
CVE-2008-3216
2008-07-18 00:00:00
debiancve
debiancve
CVE-2008-3216
2008-07-18 16:41:00
nvd
nvd
CVE-2008-3216
2008-07-18 16:41:00
cvelist
cvelist
CVE-2008-3216
2008-07-18 16:00:00
6.3 Medium
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2008-3216