Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-4941
HistoryNov 05, 2008 - 3:00 p.m.

CVE-2008-4941

2008-11-0515:00:14
Debian Security Bug Tracker
security-tracker.debian.org
6

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_, (b) /tmp/arb_pids_, © /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts.

OSVersionArchitecturePackageVersionFilename
Debian12allarb< 0.0.20071207.1-5arb_0.0.20071207.1-5_all.deb
Debian11allarb< 0.0.20071207.1-5arb_0.0.20071207.1-5_all.deb
Debian999allarb< 0.0.20071207.1-5arb_0.0.20071207.1-5_all.deb
Debian13allarb< 0.0.20071207.1-5arb_0.0.20071207.1-5_all.deb

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for DEBIANCVE:CVE-2008-4941