Lucene search

K
redhatcveRedhat.comRH:CVE-2009-5082
HistoryOct 30, 2015 - 9:52 a.m.

CVE-2009-5082

2015-10-3009:52:57
redhat.com
access.redhat.com
2

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%