Lucene search
Ubuntu.comUB:CVE-2008-5148HistoryNov 18, 2008 - 12:00 a.m.
CVE-2008-5148
2008-11-1800:00:00
ubuntu.com
ubuntu.com
7
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite
arbitrary files via a symlink attack on a /tmp/##### temporary file.
Notes
| Author | Note |
|---|---|
| jdstrand | per Debian, affected code is in an example script |
Related
openvas
openvas
Fedora Update for geda-gnetlist FEDORA-2008-9694
2009-02-17 00:00:00
Gentoo Security Advisory GLSA 200903-08 (geda)
2009-03-13 00:00:00
Fedora Update for geda-gnetlist FEDORA-2008-10000
2009-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: geda-gnetlist-20080929-2.fc8
2008-11-19 14:46:00
[SECURITY] Fedora 9 Update: geda-gnetlist-20080929-2.fc9
2008-11-19 14:51:35
[SECURITY] Fedora 10 Update: geda-gnetlist-20080929-2.fc10
2008-11-22 16:54:12
cve
cve
CVE-2008-5148
2008-11-18 16:00:01
gentoo
gentoo
gEDA: Insecure temporary file creation
2009-03-07 00:00:00
nessus
nessus
Fedora 10 : geda-gnetlist-20080929-2.fc10 (2008-10010)
2012-09-24 00:00:00
GLSA-200903-08 : gEDA: Insecure temporary file creation
2009-03-08 00:00:00
Fedora 8 : geda-gnetlist-20080929-2.fc8 (2008-9694)
2008-11-21 00:00:00
nvd
nvd
CVE-2008-5148
2008-11-18 16:00:01
cvelist
cvelist
CVE-2008-5148
2008-11-18 15:00:00
prion
prion
Design/Logic Flaw
2008-11-18 16:00:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for UB:CVE-2008-5148