Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3927
HistorySep 04, 2008 - 12:00 a.m.

CVE-2008-3927

2008-09-0400:00:00
ubuntu.com
ubuntu.com
9

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete
arbitrary files via a symlink attack on temporary files.

Notes

Author Note
jdstrand per Debian, the script is only used during build time

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for UB:CVE-2008-3927