Lucene search

K
freebsdFreeBSDF6447303-9EC9-11DA-B410-000E0C2E438A
HistoryJul 12, 2005 - 12:00 a.m.

heartbeat -- insecure temporary file creation vulnerability

2005-07-1200:00:00
vuxml.freebsd.org
4

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

Eric Romang reports a temporary file creation vulnerability
within heartbeat. The vulnerability is caused by hardcoded
temporary file usage. This can cause an attacker to create
an arbitrary symlink causing the application to overwrite the
symlinked file with the permissions of the user executing the
application.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchheartbeat< 1.2.4UNKNOWN

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for F6447303-9EC9-11DA-B410-000E0C2E438A