NVD

Id
10795  
Name
CVE-2011-4328  
Description
plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-06-15  
Modified Date
2014-01-07  
Seq
2011-4328  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60658 10795 CVE-2011-4328 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384  View
60659 10795 CVE-2011-4328 http://git.savannah.gnu.org/gitweb/?p=gnash.git;a=commitdiff;h=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55  View
60660 10795 CVE-2011-4328 openSUSE-SU-2012:0330  View
60661 10795 CVE-2011-4328 openSUSE-SU-2012:0369  View
60662 10795 CVE-2011-4328 DSA-2435  View
60663 10795 CVE-2011-4328 [oss-security] 20111121 Re: CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies  View
60664 10795 CVE-2011-4328 [oss-security] 20111121 CVE Request (minor) -- gnash -- Unsafe management of HTTP cookies  View
60665 10795 CVE-2011-4328 50747  View
60666 10795 CVE-2011-4328 https://bugzilla.redhat.com/show_bug.cgi?id=755518  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27066 JVNDB-2012-002773 Gnash の plugin/npapi/plugin.cpp における重要な情報を取得される脆弱性 Gnash の plugin/npapi/plugin.cpp が使用する /tmp のクッキーファイルは、予測可能なファイル名を持ち、脆弱なアクセス許可 (world readable) を与えられているため、重要な情報を取得される脆弱性が存在します。 CVE-2011-4328 52235 CVE-2011-4328 10795 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002773.html 2012-06-16 2012-06-20 View