Lucene search
HistoryNov 05, 2008 - 3:00 p.m.
CVE-2008-4957
cve-2008-4957
kitware gcc-xml
gccxml 0.9.0
symlink attack
temporary file
nvd
6.1 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gccxml:gccxml | gccxml | eq | 0.9.0 |
References
Social References
More
Related
prion
prion
Arbitrary file deletion
2008-11-05 15:00:00
cvelist
cvelist
CVE-2008-4957
2008-11-05 14:51:00
nessus
nessus
GLSA-200909-11 : GCC-XML: Insecure temporary file usage
2009-09-10 00:00:00
securityvulns
securityvulns
[ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage
2009-09-10 00:00:00
gcc-xml symlink vulnerability
2009-09-10 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200909-11 (gccxml)
2009-09-15 00:00:00
Gentoo Security Advisory GLSA 200909-11 (gccxml)
2009-09-15 00:00:00
ubuntucve
ubuntucve
CVE-2008-4957
2008-11-05 00:00:00
seebug
seebug
Kitware GCC-XML 'find_flags'脚本不安全临时文件建立漏洞
2009-09-14 00:00:00
gentoo
gentoo
GCC-XML: Insecure temporary file usage
2009-09-09 00:00:00
6.1 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2008-4957