PRIOn knowledge basePRION:CVE-2008-4085

HistorySep 15, 2008 - 5:12 p.m.

Command injection

2008-09-1517:12:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.

CPENameOperatorVersion
plaiteq1.4.2
plaiteq0.54
plaiteq1.5
plaiteq1.4.1
plaiteq0.55
plaiteq0.99
plaiteq0.55.2
plaiteq1.1
plaiteq1.1.1
plaiteq1.3

Name	Operator	Version
plait	eq	1.4.2
plait	eq	0.54
plait	eq	1.5
plait	eq	1.4.1
plait	eq	0.55
plait	eq	0.99
plait	eq	0.55.2
plait	eq	1.1
plait	eq	1.1.1
plait	eq	1.3

Rows per page:

1-10 of 201

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381

dev.gentoo.org/~rbu/security/debiantemp/plait

secunia.com/advisories/31617

sourceforge.net/project/shownotes.php?group_id=147849&release_id=623154

www.openwall.com/lists/oss-security/2008/10/30/2

www.securityfocus.com/bid/30928

bugs.gentoo.org/show_bug.cgi?id=235770

exchange.xforce.ibmcloud.com/vulnerabilities/44786