CVE

Id
35091  
CVE No.
CVE-2008-4974  
Status
Candidate  
Description
rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*.xml and (2) /tmp/*.backup temporary files.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383925 35091 CVE-2008-4974 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
383926 35091 CVE-2008-4974 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
383927 35091 CVE-2008-4974 MISC:http://uvw.ru/report.lenny.txt  View
383928 35091 CVE-2008-4974 CONFIRM:http://bugs.debian.org/496384  View
383929 35091 CVE-2008-4974 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/netmrg  View
383930 35091 CVE-2008-4974 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
383931 35091 CVE-2008-4974 BID:30930  View
383932 35091 CVE-2008-4974 URL:http://www.securityfocus.com/bid/30930  View
383933 35091 CVE-2008-4974 SECUNIA:32490  View
383934 35091 CVE-2008-4974 URL:http://secunia.com/advisories/32490  View
383935 35091 CVE-2008-4974 XF:netmrg-rrdedit-symlink(44834)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51116 JVNDB-2008-006426 radiance における任意のファイルを上書きされる脆弱性 radiance は、以下のスクリプトに関する処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4978 35091 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006426.html  View