Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4995
HistoryNov 07, 2008 - 12:00 a.m.

CVE-2008-4995

2008-11-0700:00:00
ubuntu.com
ubuntu.com
10

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary
files via a symlink attack on the /tmp/redirect.log temporary file. NOTE:
this vulnerability is only limited to debug mode, which is disabled by
default.

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2008-4995