Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4940
HistoryNov 05, 2008 - 12:00 a.m.

CVE-2008-4940

2008-11-0500:00:00
ubuntu.com
ubuntu.com
11

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files
via a symlink attack on the /tmp/aptoncd temporary file.

Notes

Author Note
jdstrand Debian’s package is different than Ubuntu’s, and looks like it may still be vulnerable

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for UB:CVE-2008-4940