Lucene search
HistoryNov 07, 2008 - 7:36 p.m.
CVE-2008-4994
(cve-2008-4994
xmcd
file overwrite
vulnerability
symlink attack)
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file.
Affected configurations
Node
ti_kanxmcdMatch2.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| ti_kan:xmcd | ti kan xmcd | eq | 2.6 |
References
Social References
More
Related
prion
prion
Arbitrary file deletion
2008-11-07 19:36:00
seebug
seebug
Debian xmcdไธๅฎๅ
จไธดๆถๆไปถๅปบ็ซๆผๆด
2008-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2008-4994
2008-11-07 00:00:00
cvelist
cvelist
CVE-2008-4994
2008-11-07 19:00:00
nvd
nvd
CVE-2008-4994
2008-11-07 19:36:23
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-4994