CVE

Id
35062  
CVE No.
CVE-2008-4945  
Status
Candidate  
Description
amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw.##### temporary directory.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383715 35062 CVE-2008-4945 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383716 35062 CVE-2008-4945 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383717 35062 CVE-2008-4945 MISC:http://uvw.ru/report.lenny.txt  View
383718 35062 CVE-2008-4945 CONFIRM:http://bugs.debian.org/496380  View
383719 35062 CVE-2008-4945 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/cdrw-taper  View
383720 35062 CVE-2008-4945 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383721 35062 CVE-2008-4945 BID:30890  View
383722 35062 CVE-2008-4945 URL:http://www.securityfocus.com/bid/30890  View
383723 35062 CVE-2008-4945 XF:amandacdrwtaper-amlabelcdrw-symlink(44842)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49718 JVNDB-2008-005028 dist における任意のファイルを上書きされる脆弱性 dist は、(1) patcil および (2) patdiff スクリプトに不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4949 35062 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005028.html  View