Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1614
HistoryApr 02, 2008 - 12:00 a.m.

CVE-2008-1614

2008-04-0200:00:00
ubuntu.com
ubuntu.com
9

CVSS2

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

suPHP before 0.6.3 allows local users to gain privileges via (1) a race
condition that involves multiple symlink changes to point a file owned by a
different user, or (2) a symlink to the directory of a different user,
which is used to determine privileges.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsuphp< 0.6.2-2ubuntu1UNKNOWN
ubuntu8.10noarchsuphp< 0.6.2-2ubuntu1UNKNOWN
ubuntu9.04noarchsuphp< 0.6.2-2ubuntu1UNKNOWN
ubuntu9.10noarchsuphp< 0.6.2-2ubuntu1UNKNOWN

CVSS2

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

EPSS

0

Percentile

5.1%