CVE-2008-0806
Severity:
Pending analysis
Type:
CWE-59
Link Following
Publication date:
19/02/2008
Last modified:
05/09/2008
Description
wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.
Impact
Base Score 2.0
3.60
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:paul_pelzl:wyrd:1.4.3b_3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382
- http://secunia.com/advisories/29009
- http://secunia.com/advisories/29113
- http://www.securityfocus.com/bid/27848
- https://bugzilla.redhat.com/show_bug.cgi?id=433719
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00825.html
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00841.html