Lucene search
HistoryOct 03, 2008 - 5:41 p.m.
CVE-2008-4406
debian
sabre
symlink attack
arbitrary files
vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.
Affected configurations
Node
debianxsabreMatch0.2.4b
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:xsabre | debian xsabre | eq | 0.2.4b |
Related
ubuntucve
ubuntucve
CVE-2008-4406
2008-10-03 00:00:00
cvelist
cvelist
CVE-2008-4406
2008-10-03 17:18:00
nvd
nvd
CVE-2008-4406
2008-10-03 17:41:40
prion
prion
Code injection
2008-10-03 17:41:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-4406