Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5144
HistoryNov 18, 2008 - 12:00 a.m.

CVE-2008-5144

2008-11-1800:00:00
ubuntu.com
ubuntu.com
10

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local
users to overwrite arbitrary files via a symlink attack on the
/tmp/nvidia-cg-toolkit-manifest temporary file.

Notes

Author Note
jdstrand per Debian, code can be run via postinst, but requires special circumstances

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for UB:CVE-2008-5144