Lucene search

K
cve[email protected]CVE-2014-0177
HistoryMay 27, 2014 - 2:55 p.m.

CVE-2014-0177

2014-05-2714:55:00
CWE-310
web.nvd.nist.gov
25
cve-2014-0177
nvd
am function
lib
hub
commands.rb
symlink attack
temporary patch file

6.5 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.

CPENameOperatorVersion
github:hubgithub huble1.12.0

6.5 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

Related for CVE-2014-0177