Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-5703

Опубликовано: 22 дек. 2008
Источник: nvd
CVSS2: 6.2
EPSS Низкий

Описание

gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gpsdrive:gpsdrive:*:pre2:*:*:*:*:*:*
Версия до 2.10 (включая)
cpe:2.3:a:gpsdrive:gpsdrive:1.32:*:*:*:*:*:*:*
cpe:2.3:a:gpsdrive:gpsdrive:1.33:*:*:*:*:*:*:*
cpe:2.3:a:gpsdrive:gpsdrive:2.09:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00064
Низкий

6.2 Medium

CVSS2

Дефекты

CWE-59

Связанные уязвимости

ubuntu
почти 17 лет назад

gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.

debian
почти 17 лет назад

gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwr ...

github
больше 3 лет назад

gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.

EPSS

Процентиль: 20%
0.00064
Низкий

6.2 Medium

CVSS2

Дефекты

CWE-59