Lucene search

K
nvd[email protected]NVD:CVE-2009-0032
HistoryJan 27, 2009 - 8:30 p.m.

CVE-2009-0032

2009-01-2720:30:00
CWE-59
web.nvd.nist.gov
3

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.

Affected configurations

NVD
Node
applecups
AND
mandrivacorporate_serverMatch3.0
OR
mandrivacorporate_serverMatch3.0x86_64
OR
mandrivacorporate_serverMatch4.0
OR
mandrivacorporate_serverMatch4.0x86_64
OR
mandrivalinuxMatch2008.0
OR
mandrivalinuxMatch2008.0x86_64
OR
mandrivalinuxMatch2008.1
OR
mandrivalinuxMatch2008.1x86_64
OR
mandrivalinuxMatch2009.0
OR
mandrivamulti_network_firewallMatch2.0

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%