Lucene search
PRIOn knowledge basePRION:CVE-2008-0167HistoryMay 18, 2008 - 2:20 p.m.
Design/Logic Flaw
2008-05-1814:20:00
PRIOn knowledge base
www.prio-n.com
1
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.
References
secunia.com/advisories/30088
secunia.com/advisories/30286
security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz
www.debian.org/security/2008/dsa-1577
www.securityfocus.com/bid/29215
www.vupen.com/english/advisories/2008/1537/references
exchange.xforce.ibmcloud.com/vulnerabilities/42456
Related
openvas
openvas
Debian Security Advisory DSA 1577-1 (gforge)
2008-05-27 00:00:00
Debian: Security Advisory (DSA-1577-1)
2008-05-27 00:00:00
nvd
nvd
CVE-2008-0167
2008-05-18 14:20:00
debian
debian
[SECURITY] [DSA 1577-1] New gforge packages fix insecure temporary files
2008-05-14 15:33:52
nessus
nessus
Debian DSA-1577-1 : gforge - insecure temporary files
2008-05-19 00:00:00
cvelist
cvelist
CVE-2008-0167
2008-05-18 14:00:00
cve
cve
CVE-2008-0167
2008-05-18 14:20:00
ubuntucve
ubuntucve
CVE-2008-0167
2008-05-18 00:00:00