Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3m96-w3xc-w9j4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.

The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.

EPSS

Процентиль: 10%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 5.5
nvd
больше 20 лет назад

The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.

CVSS3: 5.5
debian
больше 20 лет назад

The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1. ...

EPSS

Процентиль: 10%
0.00037
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-59