CVE

Id
32383  
CVE No.
CVE-2008-2266  
Status
Candidate  
Description
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.  
Phase
Assigned (20080516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
349799 32383 CVE-2008-2266 MLIST:[oss-security] 20080514 Re: CVE id request: uudeview  View
349800 32383 CVE-2008-2266 URL:http://www.openwall.com/lists/oss-security/2008/05/14/10  View
349801 32383 CVE-2008-2266 MLIST:[oss-security] 20080530 Re: CVE id request: uudeview  View
349802 32383 CVE-2008-2266 URL:http://www.openwall.com/lists/oss-security/2008/05/30/1  View
349803 32383 CVE-2008-2266 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972  View
349804 32383 CVE-2008-2266 GENTOO:GLSA-200808-11  View
349805 32383 CVE-2008-2266 URL:http://security.gentoo.org/glsa/glsa-200808-11.xml  View
349806 32383 CVE-2008-2266 BID:29211  View
349807 32383 CVE-2008-2266 URL:http://www.securityfocus.com/bid/29211  View
349808 32383 CVE-2008-2266 SECUNIA:30171  View
349809 32383 CVE-2008-2266 URL:http://secunia.com/advisories/30171  View
349810 32383 CVE-2008-2266 SECUNIA:31420  View
349811 32383 CVE-2008-2266 URL:http://secunia.com/advisories/31420  View
349812 32383 CVE-2008-2266 XF:uudeview-tempnam-symlink(42407)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50482 JVNDB-2008-005792 PHPWAY Kostenloses Linkmanagementscript における PHP リモートファイルインクルージョンの脆弱性 PHPWAY Kostenloses Linkmanagementscript には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-2270 32383 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005792.html  View