CVE

Id
34048  
CVE No.
CVE-2008-3931  
Status
Candidate  
Description
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371985 34048 CVE-2008-3931 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
371986 34048 CVE-2008-3931 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
371987 34048 CVE-2008-3931 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363  View
371988 34048 CVE-2008-3931 CONFIRM:http://bugs.debian.org/496418  View
371989 34048 CVE-2008-3931 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core  View
371990 34048 CVE-2008-3931 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra  View
371991 34048 CVE-2008-3931 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
371992 34048 CVE-2008-3931 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235822  View
371993 34048 CVE-2008-3931 GENTOO:GLSA-200809-13  View
371994 34048 CVE-2008-3931 URL:http://security.gentoo.org/glsa/glsa-200809-13.xml  View
371995 34048 CVE-2008-3931 MANDRIVA:MDVSA-2008:198  View
371996 34048 CVE-2008-3931 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:198  View
371997 34048 CVE-2008-3931 BID:30878  View
371998 34048 CVE-2008-3931 URL:http://www.securityfocus.com/bid/30878  View
371999 34048 CVE-2008-3931 SECUNIA:31647  View
372000 34048 CVE-2008-3931 URL:http://secunia.com/advisories/31647  View
372001 34048 CVE-2008-3931 SECUNIA:31996  View
372002 34048 CVE-2008-3931 URL:http://secunia.com/advisories/31996  View
372003 34048 CVE-2008-3931 XF:r-javareconf-symlink(44736)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45659 JVNDB-2008-000052 株式会社ディーアイシー製 shop_v50 および shop_v52 におけるクロスサイトスクリプティングの脆弱性 ショッピングカート用のソフトウェアである shop_v50 および shop_v52 には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3935 34048 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000052.html  View