CVE

Id
39397  
CVE No.
CVE-2009-1962  
Status
Candidate  
Description
Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.  
Phase
Assigned (20090606)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
434060 39397 CVE-2009-1962 MLIST:[oss-security] 20090401 CVE id rquest: xfig insecure tmp files  View
434061 39397 CVE-2009-1962 URL:http://www.openwall.com/lists/oss-security/2009/04/01/6  View
434062 39397 CVE-2009-1962 MANDRIVA:MDVSA-2009:244  View
434063 39397 CVE-2009-1962 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:244  View
434064 39397 CVE-2009-1962 BID:34328  View
434065 39397 CVE-2009-1962 URL:http://www.securityfocus.com/bid/34328  View
434066 39397 CVE-2009-1962 SECUNIA:35320  View
434067 39397 CVE-2009-1962 URL:http://secunia.com/advisories/35320  View
434068 39397 CVE-2009-1962 XF:xfig-temp-symlink(49600)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40896 JVNDB-2009-001902 Oracle Database および Oracle Enterprise Manager の Config Management コンポーネントにおける脆弱性 Oracle Database および Oracle Enterprise Manager の Config Management コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。 CVE-2009-1966 39397 5.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001902.html  View