Lucene search
Ubuntu.comUB:CVE-2009-3304HistoryDec 04, 2009 - 12:00 a.m.
CVE-2009-3304
2009-12-0400:00:00
ubuntu.com
ubuntu.com
7
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary
files via a symlink attack on authorized_keys files in users’ home
directories, related to deb-specific/ssh_dump_update.pl and
cronjobs/cvs-cron/ssh_create.php.
Related
debian
debian
[SECURITY] [DSA 1945-1] New gforge packages fix denial of service
2009-12-03 12:46:30
cve
cve
CVE-2009-3304
2022-10-03 16:23:57
nessus
nessus
Debian DSA-1945-1 : gforge - symlink attack
2010-02-24 00:00:00
openvas
openvas
Debian Security Advisory DSA 1945-1 (gforge)
2009-12-10 00:00:00
Debian: Security Advisory (DSA-1945-1)
2009-12-09 00:00:00
cvelist
cvelist
CVE-2009-3304
2022-10-03 16:23:57
prion
prion
Design/Logic Flaw
2009-12-04 19:30:00
nvd
nvd
CVE-2009-3304
2009-12-04 19:30:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2009-3304