CVE-2010-2449

Опубликовано: 07 нояб. 2019

Источник: debian

Описание

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

Пакет	Статус	Версия исправления	Релиз	Тип
gource	fixed	0.26-2		package

CVE-2010-2449

CVSS3: 6.5

ubuntu

около 6 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

CVE-2010-2449

CVSS3: 6.5

nvd

около 6 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

GHSA-7v54-gcwf-r4xw

github

больше 3 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.