Lucene search

K
cve[email protected]CVE-2008-5154
HistoryNov 18, 2008 - 4:00 p.m.

CVE-2008-5154

2008-11-1816:00:01
CWE-59
web.nvd.nist.gov
19
cve-2008-5154
bluetooth.rc
p3nfs 5.19
symlink attack
file overwrite
nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file.

Affected configurations

NVD
Node
koeniglichp3nfsMatch5.19
CPENameOperatorVersion
koeniglich:p3nfskoeniglich p3nfseq5.19

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2008-5154