CVE-2014-5254

Опубликовано: 21 нояб. 2019

Источник: nvd

CVSS3: 4.7

CVSS2: 3.3

EPSS Низкий

Описание

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

Ссылки

http://www.openwall.com/lists/oss-security/2014/08/15/4
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/69020
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600
Exploit
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95331
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2014-5254
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/15/4
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/69020
Third Party Advisory
VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756600
Exploit
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95331
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2014-5254
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xcfa_project:xcfa:*:*:*:*:*:*:*:*

Версия до 5.0.1 (исключая)

EPSS

Процентиль: 27%

0.00344

Низкий

4.7 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2014-5254

CVSS3: 4.7

ubuntu

почти 7 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CVE-2014-5254

CVSS3: 4.7

debian

почти 7 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow ...

GHSA-h7rq-6wgr-h57c

CVSS3: 4.7

github

больше 4 лет назад

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

EPSS

Процентиль: 27%

0.00344

Низкий

4.7 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-362