exploitDog

CVE-2008-5007

Опубликовано: 24 авг. 2008

Источник: redhat

EPSS Низкий

Описание

create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=460642lazarus: Multiple insecure auxiliary /tmp files usage (symlink attack possible)

EPSS

Процентиль: 3%

0.00023

Низкий

Связанные уязвимости

CVE-2008-5007

ubuntu

около 17 лет назад

create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory.

CVE-2008-5007

nvd

около 17 лет назад

create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory.

CVE-2008-5007

debian

около 17 лет назад

create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to o ...

GHSA-hhv8-fqhv-49r6

github

больше 3 лет назад

create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary directory.

EPSS

Процентиль: 3%

0.00023

Низкий