Lucene search
HistoryOct 05, 2012 - 9:55 p.m.
CVE-2012-5303
cve-2012-5303
nvd
security
symlink attack
local file overwrite
monkey http daemon
6.6 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname.
| CPE | Name | Operator | Version |
|---|---|---|---|
| monkey-project:monkey | monkey-project monkey | eq | 0.9.3 |
Related
cvelist
cvelist
CVE-2012-5303
2012-10-05 21:00:00
prion
prion
Design/Logic Flaw
2012-10-05 21:55:00
ubuntucve
ubuntucve
CVE-2012-5303
2012-10-05 00:00:00
6.6 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2012-5303