Lucene search

K
cvelistMitreCVELIST:CVE-2014-1639
HistoryJan 28, 2014 - 12:00 a.m.

CVE-2014-1639

2014-01-2800:00:00
mitre
www.cve.org
7

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%

syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%