CVE

Id
35084  
CVE No.
CVE-2008-4967  
Status
Candidate  
Description
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383866 35084 CVE-2008-4967 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383867 35084 CVE-2008-4967 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383868 35084 CVE-2008-4967 MISC:http://uvw.ru/report.lenny.txt  View
383869 35084 CVE-2008-4967 CONFIRM:http://bugs.debian.org/496372  View
383870 35084 CVE-2008-4967 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/linuxtrade  View
383871 35084 CVE-2008-4967 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383872 35084 CVE-2008-4967 BID:30910  View
383873 35084 CVE-2008-4967 URL:http://www.securityfocus.com/bid/30910  View
383874 35084 CVE-2008-4967 XF:linuxtrade-multiple-symlink(44826)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48314 JVNDB-2008-003624 mafft の mafft-homologs における任意のファイルを上書きされる脆弱性 mafft の mafft-homologs には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4971 35084 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003624.html  View