Lucene search

K
freebsdFreeBSD5F003A08-BA3C-11D9-837D-000E0C2E438A
HistoryApr 04, 2005 - 12:00 a.m.

sharutils -- unshar insecure temporary file creation

2005-04-0400:00:00
vuxml.freebsd.org
7

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

An Ubuntu Advisory reports:

Joey Hess discovered that “unshar” created temporary files
in an insecure manner. This could allow a symbolic link
attack to create or overwrite arbitrary files with the
privileges of the user invoking the program.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsharutils< 4.3.80UNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

Related for 5F003A08-BA3C-11D9-837D-000E0C2E438A