CVE-2009-4454

2009-12-2922:00:00

mitre

www.cve.org

AI Score

6.4

Confidence

High

EPSS

Percentile

0.4%

JSON

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.

References

archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html

secunia.com/advisories/37733

www.securityfocus.com/archive/1/508507/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/54916