Описание
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
EPSS
Процентиль: 75%
0.01702
Низкий
CVE ID
Связанные уязвимости
CVSS3: 6.5
ubuntu
почти 7 лет назад
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
CVSS3: 6.5
nvd
почти 7 лет назад
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
CVSS3: 6.5
debian
почти 7 лет назад
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID. ...
EPSS
Процентиль: 75%
0.01702
Низкий