Описание
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.
Ссылки
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitMailing ListThird Party Advisory
- Broken Link
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitMailing ListThird Party Advisory
- Broken Link
- Third Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.0.1 (исключая)
cpe:2.3:a:xcfa_project:xcfa:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00088
Низкий
7 High
CVSS3
4.4 Medium
CVSS2
Дефекты
CWE-362
Связанные уязвимости
CVSS3: 7
ubuntu
около 6 лет назад
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.
CVSS3: 7
debian
около 6 лет назад
xcfa before 5.0.1 creates temporary files insecurely which could allow ...
CVSS3: 7
github
больше 3 лет назад
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.
EPSS
Процентиль: 25%
0.00088
Низкий
7 High
CVSS3
4.4 Medium
CVSS2
Дефекты
CWE-362