NVD

Id
155  
Name
CVE-2008-0167  
Description
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-18  
Modified Date
2011-03-07  
Seq
2008-0167  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1246 155 CVE-2008-0167 http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz  View
1247 155 CVE-2008-0167 DSA-1577  View
1248 155 CVE-2008-0167 29215  View
1249 155 CVE-2008-0167 ADV-2008-1537  View
1250 155 CVE-2008-0167 gforge-unspecified-symlink(42456)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47267 JVNDB-2008-002577 GForge の utils/include.pl におけるアクセス制限を回避される脆弱性 GForge の utils/include.pl の write_array_file 関数は、ゼロ長になるまで短縮し、新規データを書き込むことで設定ファイルを更新されるため、アクセス制限を回避される脆弱性が存在します。 CVE-2008-0167 30280 CVE-2008-0167 155 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002577.html 2008-05-18 2012-06-26 View