Lucene search

[email protected]CVE-2009-1893

HistoryJul 17, 2009 - 4:30 p.m.

CVE-2009-1893

2009-07-1716:30:00

CWE-59

[email protected]

web.nvd.nist.gov

red hat

dhcp

configtest

local users

symlink attack

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the “dhcpd -t” command.

Affected configurations

NVD

Node

redhatenterprise_linuxMatch3.0

redhatenterprise_linuxMatch3.0as

redhatenterprise_linuxMatch3.0es

redhatenterprise_linuxMatch3.0ws

AND

iscdhcpMatch3.0.1rc1

iscdhcpMatch3.0.1rc10

iscdhcpMatch3.0.1rc11

iscdhcpMatch3.0.1rc12

iscdhcpMatch3.0.1rc13

iscdhcpMatch3.0.1rc14

iscdhcpMatch3.0.1rc2

iscdhcpMatch3.0.1rc5

iscdhcpMatch3.0.1rc6

iscdhcpMatch3.0.1rc7

iscdhcpMatch3.0.1rc8

iscdhcpMatch3.0.1rc9

VendorProductVersionCPE
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc13::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc14::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc12::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc11::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc2::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc6::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc7::
redhatenterprise_linux3.0cpe:/o:redhat:enterprise_linux:3.0:::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc1::
iscdhcp3.0.1cpe:/a:isc:dhcp:3.0.1:rc8::

Vendor	Product	Version	CPE
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc13::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc14::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc12::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc11::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc2::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc6::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc7::
redhat	enterprise_linux	3.0	cpe:/o:redhat:enterprise_linux:3.0:::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc1::
isc	dhcp	3.0.1	cpe:/a:isc:dhcp:3.0.1:rc8::