NVD

Id
3564  
Name
CVE-2008-3699  
Description
The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-14  
Modified Date
2011-03-07  
Seq
2008-3699  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
22582 3564 CVE-2008-3699 http://amarok.kde.org/en/releases/1/4/10  View
22583 3564 CVE-2008-3699 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765  View
22584 3564 CVE-2008-3699 GLSA-200809-08  View
22585 3564 CVE-2008-3699 SSA:2008-241-01  View
22586 3564 CVE-2008-3699 http://websvn.kde.org/?view=rev&revision=846626  View
22587 3564 CVE-2008-3699 MDVSA-2008:172  View
22588 3564 CVE-2008-3699 30662  View
22589 3564 CVE-2008-3699 USN-657-1  View
22590 3564 CVE-2008-3699 ADV-2008-2338  View
22591 3564 CVE-2008-3699 amarok-magnatunebrowser-symlink(44399)  View
22592 3564 CVE-2008-3699 FEDORA-2008-7739  View
22593 3564 CVE-2008-3699 FEDORA-2008-7719  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48052 JVNDB-2008-003362 AAmarok の magnatunebrowser/magnatunebrowser.cpp における任意のファイルを上書きされる脆弱性 Amarok の magnatunebrowser/magnatunebrowser.cpp にある MagnatuneBrowser::listDownloadComplete 関数には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-3699 33812 CVE-2008-3699 3564 3.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003362.html 2008-08-13 2012-06-26 View