CVE

Id
34046  
CVE No.
CVE-2008-3929  
Status
Candidate  
Description
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371960 34046 CVE-2008-3929 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
371961 34046 CVE-2008-3929 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
371962 34046 CVE-2008-3929 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369  View
371963 34046 CVE-2008-3929 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/ampache  View
371964 34046 CVE-2008-3929 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
371965 34046 CVE-2008-3929 CONFIRM:http://freshmeat.net/projects/ampache/releases/283935  View
371966 34046 CVE-2008-3929 GENTOO:GLSA-200812-22  View
371967 34046 CVE-2008-3929 URL:http://security.gentoo.org/glsa/glsa-200812-22.xml  View
371968 34046 CVE-2008-3929 BID:30875  View
371969 34046 CVE-2008-3929 URL:http://www.securityfocus.com/bid/30875  View
371970 34046 CVE-2008-3929 SECUNIA:31657  View
371971 34046 CVE-2008-3929 URL:http://secunia.com/advisories/31657  View
371972 34046 CVE-2008-3929 SECUNIA:33316  View
371973 34046 CVE-2008-3929 URL:http://secunia.com/advisories/33316  View
371974 34046 CVE-2008-3929 XF:ampache-gathermessages-symlink(44739)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46486 JVNDB-2008-001796 Wireshark の zlib-compressed データのパケット処理におけるサービス運用妨害 (DoS) の脆弱性 Wireshark には、zlib-compressed データのパケット処理に不備があることにより、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3933 34046 3.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001796.html  View