CVE

Id
34308  
CVE No.
CVE-2008-4191  
Status
Candidate  
Description
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375639 34308 CVE-2008-4191 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
375640 34308 CVE-2008-4191 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
375641 34308 CVE-2008-4191 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431  View
375642 34308 CVE-2008-4191 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=460435  View
375643 34308 CVE-2008-4191 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak  View
375644 34308 CVE-2008-4191 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
375645 34308 CVE-2008-4191 FEDORA:FEDORA-2008-8379  View
375646 34308 CVE-2008-4191 URL:https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html  View
375647 34308 CVE-2008-4191 FEDORA:FEDORA-2008-8423  View
375648 34308 CVE-2008-4191 URL:https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html  View
375649 34308 CVE-2008-4191 BID:31241  View
375650 34308 CVE-2008-4191 URL:http://www.securityfocus.com/bid/31241  View
375651 34308 CVE-2008-4191 SECUNIA:31880  View
375652 34308 CVE-2008-4191 URL:http://secunia.com/advisories/31880  View
375653 34308 CVE-2008-4191 SECUNIA:32071  View
375654 34308 CVE-2008-4191 URL:http://secunia.com/advisories/32071  View
375655 34308 CVE-2008-4191 XF:emacspeak-extracttable-symlink(45237)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47165 JVNDB-2008-002475 Opera における任意のアドレスの表示を誘発させられる脆弱性 Opera は、異なるフレームが使われているアドレスの変更を行うフレームの Web ページ機能を適切に制限しないため、フレーム内にある任意のアドレスの表示を誘発される脆弱性が存在します。 CVE-2008-4195 34308 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002475.html  View