CVE-2016-5026

Опубликовано: 30 янв. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

Ссылки

http://www.openwall.com/lists/oss-security/2016/05/23/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/24/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/90821
Third Party Advisory
VDB Entry
https://github.com/micahflee/onionshare
Issue Tracking
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/23/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/24/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/90821
Third Party Advisory
VDB Entry
https://github.com/micahflee/onionshare
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:onionshare:onionshare:*:*:*:*:*:*:*:*

Версия до 0.9.0 (включая)

EPSS

Процентиль: 25%

0.00327

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2016-5026

CVSS3: 5.5

ubuntu

больше 9 лет назад

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

CVE-2016-5026

CVSS3: 5.5

debian

больше 9 лет назад

hs.py in OnionShare before 0.9.1 allows local users to modify the hidd ...

GHSA-55hg-465f-gp62

CVSS3: 5.5

github

больше 4 лет назад

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

EPSS

Процентиль: 25%

0.00327

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-284