CVE

Id
40724  
CVE No.
CVE-2009-3289  
Status
Candidate  
Description
The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.  
Phase
Assigned (20090922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
446669 40724 CVE-2009-3289 MLIST:[oss-security] 20090908 CVE Request - glib symlink copying permission exposure  View
446670 40724 CVE-2009-3289 URL:http://www.openwall.com/lists/oss-security/2009/09/08/8  View
446671 40724 CVE-2009-3289 MISC:https://bugzilla.gnome.org/show_bug.cgi?id=593406  View
446672 40724 CVE-2009-3289 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135  View
446673 40724 CVE-2009-3289 SUSE:SUSE-SR:2010:010  View
446674 40724 CVE-2009-3289 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html  View
446675 40724 CVE-2009-3289 SECUNIA:39656  View
446676 40724 CVE-2009-3289 URL:http://secunia.com/advisories/39656  View
446677 40724 CVE-2009-3289 VUPEN:ADV-2010-1001  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41170 JVNDB-2009-002177 PHP の imagecolortransparent 関数におけるカラーインデックスの処理に関する脆弱性 PHP の imagecolortransparent 関数には、カラーインデックスを適切にチェックしないため、詳細不明な脆弱性が存在します。 CVE-2009-3293 40724 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002177.html  View