CVE

Id
35076  
CVE No.
CVE-2008-4959  
Status
Candidate  
Description
geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383804 35076 CVE-2008-4959 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383805 35076 CVE-2008-4959 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383806 35076 CVE-2008-4959 MISC:http://uvw.ru/report.lenny.txt  View
383807 35076 CVE-2008-4959 CONFIRM:http://bugs.debian.org/496436  View
383808 35076 CVE-2008-4959 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/gpsdrive-scripts  View
383809 35076 CVE-2008-4959 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383810 35076 CVE-2008-4959 FEDORA:FEDORA-2009-1366  View
383811 35076 CVE-2008-4959 URL:https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html  View
383812 35076 CVE-2008-4959 BID:30905  View
383813 35076 CVE-2008-4959 URL:http://www.securityfocus.com/bid/30905  View
383814 35076 CVE-2008-4959 SECUNIA:33825  View
383815 35076 CVE-2008-4959 URL:http://secunia.com/advisories/33825  View
383816 35076 CVE-2008-4959 SECUNIA:31694  View
383817 35076 CVE-2008-4959 URL:http://secunia.com/advisories/31694  View
383818 35076 CVE-2008-4959 XF:gpsdrive-geocode-symlink(44759)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46946 JVNDB-2008-002256 Cisco IOS および CatOS における VTP パケット処理に関するサービス運用妨害 (DoS) の脆弱性 Cisco IOS および CatOS の VLAN Trunking Protocol (VTP) 実装には、VTP オペレーティングモードがトランスペアレントでない場合、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-4963 35076 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002256.html  View