Описание
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00089
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
redhat
больше 23 лет назад
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
github
около 3 лет назад
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
EPSS
Процентиль: 27%
0.00089
Низкий
2.1 Low
CVSS2
Дефекты
NVD-CWE-Other