Design/Logic Flaw

2009-09-2119:30:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
firefoxeq2.0
firefoxeq2.0.0.1
firefoxeq2.0.0.2
firefoxeq2.0.0.3
firefoxeq2.0.0.4
firefoxeq2.0.0.5
firefoxeq2.0.0.6
firefoxeq2.0.0.7
firefoxeq2.0.0.8
firefoxeq2.0.0.9

Name	Operator	Version
firefox	eq	2.0
firefox	eq	2.0.0.1
firefox	eq	2.0.0.2
firefox	eq	2.0.0.3
firefox	eq	2.0.0.4
firefox	eq	2.0.0.5
firefox	eq	2.0.0.6
firefox	eq	2.0.0.7
firefox	eq	2.0.0.8
firefox	eq	2.0.0.9