CVE-2010-2449

Опубликовано: 07 нояб. 2019

Источник: debian

EPSS Низкий

Описание

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

Пакет	Статус	Версия исправления	Релиз	Тип
gource	fixed	0.26-2		package

EPSS

Процентиль: 75%

0.01702

Низкий

CVE-2010-2449

CVSS3: 6.5

ubuntu

почти 7 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

CVE-2010-2449

CVSS3: 6.5

nvd

почти 7 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

GHSA-7v54-gcwf-r4xw

github

больше 4 лет назад

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

EPSS

Процентиль: 75%

0.01702

Низкий