CVE-2009-1526

Опубликовано: 05 мая 2009

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html
Broken Link
http://osvdb.org/54014
Broken Link
http://secunia.com/advisories/34861
Vendor Advisory
http://www.directadmin.com/features.php?id=968
Vendor Advisory
Release Notes
http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html
Broken Link
http://osvdb.org/54014
Broken Link
http://secunia.com/advisories/34861
Vendor Advisory
http://www.directadmin.com/features.php?id=968
Vendor Advisory
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:directadmin:directadmin:*:*:*:*:*:*:*:*

Версия до 1.33.4 (исключая)

EPSS

Процентиль: 24%

0.00082

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-hwc8-4222-xw22

github

почти 4 года назад