Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-0296

Опубликовано: 19 мая 2014
Источник: redhat
CVSS2: 1.9
EPSS Низкий

Описание

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6texliveNot affected
Red Hat Enterprise Linux 7texliveNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-77
https://bugzilla.redhat.com/show_bug.cgi?id=1197082texlive rpm scriptlet allows unprivileged user to delete arbitrary files

EPSS

Процентиль: 24%
0.00084
Низкий

1.9 Low

CVSS2

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 8 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

CVSS3: 4.7
nvd
больше 8 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

CVSS3: 4.7
debian
больше 8 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged ...

CVSS3: 4.7
github
больше 3 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

EPSS

Процентиль: 24%
0.00084
Низкий

1.9 Low

CVSS2