PRIOn knowledge basePRION:CVE-2008-3931

HistorySep 04, 2008 - 6:41 p.m.

Authorization

2008-09-0418:41:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%

JSON

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

CPENameOperatorVersion
req2.7.2

CPE	Name	Operator	Version
	r	eq	2.7.2

References

bugs.debian.org/496418

bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363

dev.gentoo.org/~rbu/security/debiantemp/r-base-core

dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra

secunia.com/advisories/31647

secunia.com/advisories/31996

security.gentoo.org/glsa/glsa-200809-13.xml

www.mandriva.com/security/advisories?name=MDVSA-2008:198

www.openwall.com/lists/oss-security/2008/10/30/2

www.securityfocus.com/bid/30878

bugs.gentoo.org/show_bug.cgi?id=235770

bugs.gentoo.org/show_bug.cgi?id=235822

exchange.xforce.ibmcloud.com/vulnerabilities/44736

6.3 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%

JSON

Related for PRION:CVE-2008-3931