Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-1640

Опубликовано: 28 янв. 2014
Источник: nvd
CVSS2: 3.3
EPSS Низкий

Описание

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:debian:axiom:20100701-1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00047
Низкий

3.3 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

ubuntu
около 12 лет назад

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.

debian
около 12 лет назад

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe tem ...

github
больше 3 лет назад

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.

EPSS

Процентиль: 15%
0.00047
Низкий

3.3 Low

CVSS2

Дефекты

CWE-59