Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-0296

Опубликовано: 06 окт. 2017
Источник: nvd
CVSS3: 4.7
CVSS2: 1.2
EPSS Низкий

Описание

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:tug:texlive:6.20131226_r32488.fc20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:tug:texlive:3.1.20140525_r34255.fc21:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

EPSS

Процентиль: 24%
0.00084
Низкий

4.7 Medium

CVSS3

1.2 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 8 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

redhat
больше 11 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

CVSS3: 4.7
debian
больше 8 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged ...

CVSS3: 4.7
github
больше 3 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

EPSS

Процентиль: 24%
0.00084
Низкий

4.7 Medium

CVSS3

1.2 Low

CVSS2

Дефекты

CWE-264