CVE

Id
41468  
CVE No.
CVE-2009-4033  
Status
Candidate  
Description
A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455725 41468 CVE-2009-4033 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=515062  View
455726 41468 CVE-2009-4033 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=542926  View
455727 41468 CVE-2009-4033 MANDRIVA:MDVSA-2009:342  View
455728 41468 CVE-2009-4033 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:342  View
455729 41468 CVE-2009-4033 REDHAT:RHSA-2009:1642  View
455730 41468 CVE-2009-4033 URL:http://www.redhat.com/support/errata/RHSA-2009-1642.html  View
455731 41468 CVE-2009-4033 BID:37249  View
455732 41468 CVE-2009-4033 URL:http://www.securityfocus.com/bid/37249  View
455733 41468 CVE-2009-4033 OVAL:oval:org.mitre.oval:def:10555  View
455734 41468 CVE-2009-4033 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10555  View
455735 41468 CVE-2009-4033 SECTRACK:1023284  View
455736 41468 CVE-2009-4033 URL:http://securitytracker.com/id?1023284  View
455737 41468 CVE-2009-4033 XF:acpid-logfile-privilege-escalation(54677)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42895 JVNDB-2009-003902 FA における SQL インジェクションの脆弱性 FrontAccounting (FA) には、SQL インジェクションの脆弱性が存在します。 CVE-2009-4037 41468 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003902.html  View