Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4984
HistoryNov 06, 2008 - 12:00 a.m.

CVE-2008-4984

2008-11-0600:00:00
ubuntu.com
ubuntu.com
12

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a
symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and
© /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1)
dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2008-4984