CVE

Id
25413  
CVE No.
CVE-2007-2056  
Status
Candidate  
Description
** REJECT ** The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race"). NOTE: the researcher has retracted the original advisory, stating that "the portion of vulnerable code is not called in any current version of AFFLIB and is therefore not exploitable."  
Phase
Assigned (20070416)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
253579 25413 CVE-2007-2056 BUGTRAQ:20070427 AFFLIB(TM): Time-of-Check-Time-of-Use File Race  View
253580 25413 CVE-2007-2056 URL:http://www.securityfocus.com/archive/1/archive/1/467037/100/0/threaded  View
253581 25413 CVE-2007-2056 BUGTRAQ:20070428 please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB"  View
253582 25413 CVE-2007-2056 URL:http://www.securityfocus.com/archive/1/archive/1/467181/100/0/threaded  View
253583 25413 CVE-2007-2056 BUGTRAQ:20070429 Re: please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB"  View
253584 25413 CVE-2007-2056 URL:http://www.securityfocus.com/archive/1/archive/1/467182/100/0/threaded  View
253585 25413 CVE-2007-2056 MISC:http://www.vsecurity.com/bulletins/advisories/2007/afflib-toctou.txt  View
253586 25413 CVE-2007-2056 BID:23696  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56721 JVNDB-2007-005413 Acubix PicoZip におけるディレクトリトラバーサルの脆弱性 Acubix PicoZip には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-2058 25413 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005413.html  View