CVE

Id
35086  
CVE No.
CVE-2008-4969  
Status
Candidate  
Description
ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, and (j) /tmp/nfs_fsstress.sardata temporary files, related to the (1) ftp_setup_vsftp_conf and (2) nfs_fsstress.sh scripts.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383886 35086 CVE-2008-4969 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383887 35086 CVE-2008-4969 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383888 35086 CVE-2008-4969 CONFIRM:http://bugs.debian.org/496411  View
383889 35086 CVE-2008-4969 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/ltp-network-te  View
383890 35086 CVE-2008-4969 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383891 35086 CVE-2008-4969 XF:ltpnetworktest-multiple-symlink(46566)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47013 JVNDB-2008-002323 myspell の i2myspell におけるシンボリックリンク攻撃の脆弱性 myspell の i2myspell には、シンボリックリンク攻撃の脆弱性が存在します。 CVE-2008-4973 35086 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002323.html  View