Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5377
HistoryDec 08, 2008 - 12:00 a.m.

CVE-2008-5377

2008-12-0800:00:00
ubuntu.com
ubuntu.com
7

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a
symlink attack on the /tmp/pstopdf.log temporary file, a different
vulnerability than CVE-2001-1333.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcupsys< 1.2.2-0ubuntu0.6.06.12UNKNOWN
ubuntu7.10noarchcupsys< 1.3.2-1ubuntu7.9UNKNOWN
ubuntu8.04noarchcupsys< 1.3.7-1ubuntu3.3UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%