Lucene search
HistoryDec 29, 2009 - 10:30 p.m.
CVE-2009-4454
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0
Percentile
0.4%
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.
Affected configurations
Node
sainivideocacheMatch1.9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| saini | videocache | 1.9.2 | cpe:2.3:a:saini:videocache:1.9.2:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
VideoCache 1.9.2 - 'vccleaner' Local Privilege Escalation
2009-12-16 00:00:00
prion
prion
Code injection
2009-12-29 22:30:00
cvelist
cvelist
CVE-2009-4454
2009-12-29 22:00:00
cve
cve
CVE-2009-4454
2009-12-29 22:30:00
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0
Percentile
0.4%
Related for NVD:CVE-2009-4454