Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2008-4987

Опубликовано: 24 авг. 2008
Источник: redhat
EPSS Низкий

Описание

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=460429xastir: Insecure auxiliary /tmp file usage (symlink attack possible)

EPSS

Процентиль: 34%
0.00416
Низкий

Связанные уязвимости

ubuntu
больше 17 лет назад

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.

nvd
больше 17 лет назад

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.

debian
больше 17 лет назад

xastir 1.9.2 allows local users to overwrite arbitrary files via a sym ...

github
около 4 лет назад

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.

EPSS

Процентиль: 34%
0.00416
Низкий