Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0032
HistoryJan 27, 2009 - 12:00 a.m.

CVE-2009-0032

2009-01-2700:00:00
ubuntu.com
ubuntu.com
5

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0
and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to
overwrite arbitrary files via a symlink attack on the /tmp/pdf.log
temporary file.

Notes

Author Note
jdstrand Mandriva specific, issue affects pdfdistiller

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%