NVD

Id
2187  
Name
CVE-2008-2266  
Description
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-16  
Modified Date
2009-04-02  
Seq
2008-2266  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13940 2187 CVE-2008-2266 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972  View
13941 2187 CVE-2008-2266 GLSA-200808-11  View
13942 2187 CVE-2008-2266 [oss-security] 20080514 Re: CVE id request: uudeview  View
13943 2187 CVE-2008-2266 [oss-security] 20080530 Re: CVE id request: uudeview  View
13944 2187 CVE-2008-2266 29211  View
13945 2187 CVE-2008-2266 uudeview-tempnam-symlink(42407)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63272 JVNDB-2004-000635 nzbget で使用される UUDeview の uulib/uunconc.c における任意のファイルを上書きされる脆弱性 nzbget で使用される UUDeview の uulib/uunconc.c には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-2266 32379 CVE-2008-2266 2187 4.4 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000635.html 2004-03-01 2012-09-25 View