Lucene search
MitreCVELIST:CVE-2009-3304HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3304
2022-10-0316:23:57
mitre
www.cve.org
gforge
symlink attack
vulnerability
authorized_keys files
home directories
ssh_dump_update.pl
cvs-cron
ssh_create.php
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users’ home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.
Related
debian
debian
[SECURITY] [DSA 1945-1] New gforge packages fix denial of service
2009-12-03 12:46:30
openvas
openvas
Debian Security Advisory DSA 1945-1 (gforge)
2009-12-10 00:00:00
Debian: Security Advisory (DSA-1945-1)
2009-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2009-3304
2009-12-04 00:00:00
cve
cve
CVE-2009-3304
2022-10-03 16:23:57
nessus
nessus
Debian DSA-1945-1 : gforge - symlink attack
2010-02-24 00:00:00
prion
prion
Design/Logic Flaw
2009-12-04 19:30:00
nvd
nvd
CVE-2009-3304
2009-12-04 19:30:00