Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-4949
HistoryNov 05, 2008 - 3:00 p.m.

CVE-2008-4949

2008-11-0515:00:15
Debian Security Bug Tracker
security-tracker.debian.org
9

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and © /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts.

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for DEBIANCVE:CVE-2008-4949