CVE-2010-2056

2010-07-2205:43:00

CWE-59

[email protected]

web.nvd.nist.gov

cve-2010-2056

gnu

symlink attack

nvd

8.4 High

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

CPENameOperatorVersion
gnu:gvgnu gveq3.6.7
gnu:gvgnu gveq3.6.4
gnu:gvgnu gveq3.6.5
gnu:gvgnu gvle3.6.9
gnu:gvgnu gveq3.6.8
gnu:gvgnu gveq3.6.1
gnu:gvgnu gveq3.6.2
gnu:gvgnu gveq3.5.8
gnu:gvgnu gveq3.6.6
gnu:gvgnu gveq3.6.0

CPE	Name	Operator	Version
gnu:gv	gnu gv	eq	3.6.7
gnu:gv	gnu gv	eq	3.6.4
gnu:gv	gnu gv	eq	3.6.5
gnu:gv	gnu gv	le	3.6.9
gnu:gv	gnu gv	eq	3.6.8
gnu:gv	gnu gv	eq	3.6.1
gnu:gv	gnu gv	eq	3.6.2
gnu:gv	gnu gv	eq	3.5.8
gnu:gv	gnu gv	eq	3.6.6
gnu:gv	gnu gv	eq	3.6.0