Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6cpc-mj5c-m9rq

Опубликовано: 18 фев. 2019
Источник: github
Github: Прошло ревью

Описание

Arbitrary File Write in cli

Affected versions of cli use predictable temporary file names. If an attacker can create a symbolic link at the location of one of these temporarly file names, the attacker can arbitrarily write to any file that the user which owns the cli process has permission to write to.

Proof of Concept

By creating Symbolic Links at the following locations, the target of the link can be written to.

lock_file = '/tmp/' + cli.app + '.pid', log_file = '/tmp/' + cli.app + '.log';

Recommendation

Update to version 1.0.0 or later.

Пакеты

Наименование

cli

npm
Затронутые версииВерсия исправления

< 1.0.0

1.0.0

EPSS

Процентиль: 54%
0.00317
Низкий

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.5
ubuntu
больше 7 лет назад

The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.

CVSS3: 3.5
nvd
больше 7 лет назад

The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.

CVSS3: 3.5
debian
больше 7 лет назад

The package `node-cli` before 1.0.0 insecurely uses the lock_file and ...

EPSS

Процентиль: 54%
0.00317
Низкий

Дефекты

CWE-22