Lucene search

K
cve[email protected]CVE-2008-5378
HistoryDec 08, 2008 - 11:30 p.m.

CVE-2008-5378

2008-12-0823:30:00
CWE-59
web.nvd.nist.gov
20
arb-kill
arb 0.0.20071207.1
local users
overwrite
arbitrary files
symlink attack

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids__ temporary file.

Affected configurations

NVD
Node
lehrstuhl_fur_mikrobiologiearbMatch0.0.20071207.1

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%