Lucene search

K
cveMitreCVE-2008-5369
HistoryDec 08, 2008 - 11:30 p.m.

CVE-2008-5369

2008-12-0823:30:00
CWE-59
mitre
web.nvd.nist.gov
22
noip2
vulnerability
local users
file overwrite
symlink attack
nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.

Affected configurations

Nvd
Node
no-ipno-ip2Match2.1.7
VendorProductVersionCPE
no-ipno-ip22.1.7cpe:2.3:a:no-ip:no-ip2:2.1.7:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2008-5369