exploitDog

CVE-2008-3699

Опубликовано: 12 авг. 2008

Источник: redhat

EPSS Низкий

Описание

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=459135amarok: temporary file vulnerability via symlink attacks (priv esc)

EPSS

Процентиль: 28%

0.00353

Низкий

Связанные уязвимости

CVE-2008-3699

ubuntu

почти 18 лет назад

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

CVE-2008-3699

nvd

почти 18 лет назад

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

CVE-2008-3699

debian

почти 18 лет назад

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowse ...

GHSA-4vwq-rgw9-5x74

github

около 4 лет назад

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

EPSS

Процентиль: 28%

0.00353

Низкий