Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5839
HistoryNov 06, 2007 - 12:00 a.m.

CVE-2007-5839

2007-11-0600:00:00
ubuntu.com
ubuntu.com
5

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

The e_hostname function in commands.c in BitchX 1.1a allows local users to
overwrite arbitrary files via a symlink attack on temporary files when
using the (1) HOSTNAME or (2) IRCHOST command.

Bugs

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%