CVE

Id
35103  
CVE No.
CVE-2008-4986  
Status
Candidate  
Description
wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2) account.sh scripts.  
Phase
Assigned (20081106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
384030 35103 CVE-2008-4986 MLIST:[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
384031 35103 CVE-2008-4986 URL:http://www.openwall.com/lists/oss-security/2008/10/30/2  View
384032 35103 CVE-2008-4986 CONFIRM:http://bugs.debian.org/496387  View
384033 35103 CVE-2008-4986 CONFIRM:http://dev.gentoo.org/~rbu/security/debiantemp/wims  View
384034 35103 CVE-2008-4986 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=235770  View
384035 35103 CVE-2008-4986 BID:32244  View
384036 35103 CVE-2008-4986 URL:http://www.securityfocus.com/bid/32244  View
384037 35103 CVE-2008-4986 XF:wims-coqweb-account-symlink(46510)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41723 JVNDB-2009-002730 ECP における任意のファイルを上書きされる脆弱性 Enomaly Elastic Computing Platform (ECP) (旧称: Enomalism) には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4990 35103 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002730.html  View