Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-4173

Опубликовано: 22 нояб. 2010
Источник: nvd
CVSS2: 3.3
EPSS Низкий

Описание

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openfabrics:libsdp:*:*:*:*:*:*:*:*
Версия до 1.1.104 (включая)
cpe:2.3:a:openfabrics:libsdp:1.1.99:*:*:*:*:*:*:*
cpe:2.3:a:openfabrics:libsdp:1.1.100:*:*:*:*:*:*:*
cpe:2.3:a:openfabrics:libsdp:1.1.101:*:*:*:*:*:*:*
cpe:2.3:a:openfabrics:libsdp:1.1.102:*:*:*:*:*:*:*
cpe:2.3:a:openfabrics:libsdp:1.1.103:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00085
Низкий

3.3 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

ubuntu
около 15 лет назад

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

redhat
около 15 лет назад

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

debian
около 15 лет назад

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier ...

github
больше 3 лет назад

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

EPSS

Процентиль: 25%
0.00085
Низкий

3.3 Low

CVSS2

Дефекты

CWE-59