CVE

Id
35058  
CVE No.
CVE-2008-4941  
Status
Candidate  
Description
arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383684 35058 CVE-2008-4941 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383685 35058 CVE-2008-4941 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383686 35058 CVE-2008-4941 MISC:http://uvw.ru/report.lenny.txt  View
383687 35058 CVE-2008-4941 CONFIRM:http://bugs.debian.org/496396  View
383688 35058 CVE-2008-4941 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/arb-common  View
383689 35058 CVE-2008-4941 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383690 35058 CVE-2008-4941 BID:30895  View
383691 35058 CVE-2008-4941 URL:http://www.securityfocus.com/bid/30895  View
383692 35058 CVE-2008-4941 XF:arbcommon-arbfastdnaml-symlink(44844)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51113 JVNDB-2008-006423 cdrw-taper の amlabel-cdrw における任意のファイルを上書きされる脆弱性 cdrw-taper の amlabel-cdrw には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4945 35058 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006423.html  View