Lucene search

PRIOn knowledge basePRION:CVE-2008-4477

HistoryOct 08, 2008 - 12:00 a.m.

Arbitrary file deletion

2008-10-0800:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.

CPENameOperatorVersion
moneq0.99.2

CPE	Name	Operator	Version
	mon	eq	0.99.2

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398

dev.gentoo.org/~rbu/security/debiantemp/mon

lists.debian.org/debian-devel/2008/08/msg00312.html

secunia.com/advisories/32183

www.mandriva.com/security/advisories?name=MDVSA-2008:214

www.openwall.com/lists/oss-security/2008/10/30/2

www.securityfocus.com/bid/31597

www.us.debian.org/security/2008/dsa-1648

bugs.gentoo.org/show_bug.cgi?id=235770

exchange.xforce.ibmcloud.com/vulnerabilities/45738

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2008-4477