Lucene search
HistoryMar 04, 2009 - 5:30 p.m.
CVE-2008-6398
cve-2008-6398
sng
sng 1.0.2
local users
symlink attack
file overwrite
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files.
Affected configurations
Node
eric_raymondsngMatch1.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| eric_raymond:sng | eric raymond sng | eq | 1.0.2 |
Related
prion
prion
Code injection
2009-03-04 17:30:00
debiancve
debiancve
CVE-2008-6398
2009-03-04 17:30:02
cvelist
cvelist
CVE-2008-6398
2009-03-04 17:00:00
ubuntucve
ubuntucve
CVE-2008-6398
2009-03-04 00:00:00
nvd
nvd
CVE-2008-6398
2009-03-04 17:30:02
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-6398