Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4967
HistoryNov 06, 2008 - 12:00 a.m.

CVE-2008-4967

2008-11-0600:00:00
ubuntu.com
ubuntu.com
9

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

linuxtrade 3.65 allows local users to overwrite arbitrary files via a
symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and © /tmp/ggg
temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn,
and (3) moneyam.helper scripts.

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for UB:CVE-2008-4967