Lucene search

K
freebsdFreeBSD43CB40B3-C8C2-11DA-A672-000E0C2E438A
HistoryJan 27, 2005 - 12:00 a.m.

f2c -- insecure temporary files

2005-01-2700:00:00
vuxml.freebsd.org
10

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Javier Fernández-Sanguino Peña reports two temporary file
vulnerability within f2c. The vulnerabilities are caused
due to weak temporary file handling. An attacker could
create an symbolic link, causing a local user running f2c
to overwrite the symlinked file. This could give the
attacker elevated privileges.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchf2c< 20060506UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for 43CB40B3-C8C2-11DA-A672-000E0C2E438A