Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-4472

Опубликовано: 22 апр. 2014
Источник: ubuntu
Приоритет: medium
CVSS2: 3.3

Описание

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

lucid

not-affected

precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

upstream

needs-triage

Показывать по

Ссылки на источники

3.3 Low

CVSS2

Связанные уязвимости

redhat
больше 12 лет назад

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

nvd
почти 12 лет назад

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

debian
почти 12 лет назад

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 a ...

github
больше 3 лет назад

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

3.3 Low

CVSS2