CVE

Id
35083  
CVE No.
CVE-2008-4966  
Status
Candidate  
Description
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/snap##### and (b) /tmp/nightly##### temporary files, related to the (1) maysnap and (2) maytest scripts.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383857 35083 CVE-2008-4966 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383858 35083 CVE-2008-4966 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383859 35083 CVE-2008-4966 MISC:http://uvw.ru/report.lenny.txt  View
383860 35083 CVE-2008-4966 CONFIRM:http://bugs.debian.org/496376  View
383861 35083 CVE-2008-4966 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/linux-patch-openswan  View
383862 35083 CVE-2008-4966 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383863 35083 CVE-2008-4966 BID:30918  View
383864 35083 CVE-2008-4966 URL:http://www.securityfocus.com/bid/30918  View
383865 35083 CVE-2008-4966 XF:linuxpatchopenswan-maysnap-maytest-symlink(44823)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49722 JVNDB-2008-005032 lustre の runiozone における任意のファイルを上書きされる脆弱性 lustre の runiozone には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4970 35083 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005032.html  View