NVD

Id
30942  
Name
CVE-2014-2524  
Description
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-20  
Modified Date
2016-09-07  
Seq
2014-2524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162708 30942 CVE-2014-2524 http://advisories.mageia.org/MGASA-2014-0319.html  View
162709 30942 CVE-2014-2524 [Bug-readline] 20140331 Readline-6.3 Official Patch 3  View
162710 30942 CVE-2014-2524 openSUSE-SU-2014:1226  View
162711 30942 CVE-2014-2524 [oss-security] 20140314 Insecure usage of temporary files in GNU Readline  View
162712 30942 CVE-2014-2524 [oss-security] 20140317 Re: Insecure usage of temporary files in GNU Readline  View
162713 30942 CVE-2014-2524 MDVSA-2014:154  View
162714 30942 CVE-2014-2524 MDVSA-2015:132  View
162715 30942 CVE-2014-2524 https://bugzilla.redhat.com/show_bug.cgi?id=1077023  View
162716 30942 CVE-2014-2524 FEDORA-2014-7523  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15007 JVNDB-2014-003882 GNU Readline の util.c 内の _rl_tropen 関数 における任意のファイルを作成される脆弱性 GNU Readline の util.c 内の _rl_tropen 関数 には、任意のファイルを作成、または上書きされる脆弱性が存在します。 CVE-2014-2524 69811 CVE-2014-2524 30942 3.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003882.html 2014-03-31 2014-08-22 View