Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-0296

Опубликовано: 19 мая 2014
Источник: redhat
CVSS2: 1.9

Описание

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6texliveNot affected
Red Hat Enterprise Linux 7texliveNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-77
https://bugzilla.redhat.com/show_bug.cgi?id=1197082texlive rpm scriptlet allows unprivileged user to delete arbitrary files

1.9 Low

CVSS2

Связанные уязвимости

CVSS3: 4.7
ubuntu
почти 9 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

CVSS3: 4.7
nvd
почти 9 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

CVSS3: 4.7
debian
почти 9 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged ...

CVSS3: 4.7
github
больше 4 лет назад

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

1.9 Low

CVSS2