Arbitrary Files Overwrite

2020-12-0604:26:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

xcal is vulnerable to arbitrary files overwrite. The library allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file directory.

CPENameOperatorVersion
xcal:stretcheq4.1-19+b2
xcal:bustereq4.1-19+b2
xcal:sideq4.1-19+b2
xcal:bullseyeeq4.1-19+b2
xcal:stretcheq4.1-19+b2
xcal:bustereq4.1-19+b2
xcal:sideq4.1-19+b2
xcal:bullseyeeq4.1-19+b2

Name	Operator	Version
xcal:stretch	eq	4.1-19+b2
xcal:buster	eq	4.1-19+b2
xcal:sid	eq	4.1-19+b2
xcal:bullseye	eq	4.1-19+b2
xcal:stretch	eq	4.1-19+b2
xcal:buster	eq	4.1-19+b2
xcal:sid	eq	4.1-19+b2
xcal:bullseye	eq	4.1-19+b2