Lucene search

K
freebsdFreeBSD93BA13F8-5C41-11DB-A5AE-00508D6A62DF
HistoryDec 20, 2005 - 12:00 a.m.

tkdiff -- temporary file symlink privilege escalation

2005-12-2000:00:00
vuxml.freebsd.org
15

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.9%

Javier Fernández-Sanguino Peña reports a vulnerability in
tkdiff which allows local users to gain priveleges of the
user running tkdiff due to insecure temporary file creation.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtkdiff< 4.1.1UNKNOWN

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.9%

Related for 93BA13F8-5C41-11DB-A5AE-00508D6A62DF