Lucene search

K
prionPRIOn knowledge basePRION:CVE-2009-3304
HistoryDec 04, 2009 - 7:30 p.m.

Design/Logic Flaw

2009-12-0419:30:00
PRIOn knowledge base
www.prio-n.com
2

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users’ home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.

CPENameOperatorVersion
gforgeeq4.8.2
gforgeeq4.7 rc2
gforgeeq4.5.14

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%