CVE

Id
35082  
CVE No.
CVE-2008-4965  
Status
Candidate  
Description
liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383848 35082 CVE-2008-4965 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383849 35082 CVE-2008-4965 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383850 35082 CVE-2008-4965 MISC:http://uvw.ru/report.lenny.txt  View
383851 35082 CVE-2008-4965 CONFIRM:http://bugs.debian.org/496360  View
383852 35082 CVE-2008-4965 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/liguidsoap  View
383853 35082 CVE-2008-4965 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383854 35082 CVE-2008-4965 BID:30912  View
383855 35082 CVE-2008-4965 URL:http://www.securityfocus.com/bid/30912  View
383856 35082 CVE-2008-4965 XF:liquidsoap-liquidsoap-symlink(44827)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48313 JVNDB-2008-003623 ltp-network-test における任意のファイルを上書きされる脆弱性 ltp-network-test には、(1) ftp_setup_vsftp_conf スクリプトおよび (2) nfs_fsstress.sh スクリプトの処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4969 35082 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003623.html  View