NVD

Id
3791  
Name
CVE-2008-3929  
Description
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-04  
Modified Date
2011-01-06  
Seq
2008-3929  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24034 3791 CVE-2008-3929 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369  View
24035 3791 CVE-2008-3929 http://dev.gentoo.org/~rbu/security/debiantemp/ampache  View
24036 3791 CVE-2008-3929 http://freshmeat.net/projects/ampache/releases/283935  View
24037 3791 CVE-2008-3929 GLSA-200812-22  View
24038 3791 CVE-2008-3929 [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
24039 3791 CVE-2008-3929 30875  View
24040 3791 CVE-2008-3929 ampache-gathermessages-symlink(44739)  View
24041 3791 CVE-2008-3929 https://bugs.gentoo.org/show_bug.cgi?id=235770  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48096 JVNDB-2008-003406 Ampache の gather-messages.sh における任意のファイルを上書きされる脆弱性 Ampache の gather-messages.sh には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-3929 34042 CVE-2008-3929 3791 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003406.html 2008-09-04 2012-06-26 View