NVD

Id
4646  
Name
CVE-2008-4832  
Description
rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-17  
Modified Date
2012-10-30  
Seq
2008-4832  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29124 4646 CVE-2008-4832 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318  View
29125 4646 CVE-2008-4832 rpath-initscripts-rcsysinit-symlink(46700)  View
29126 4646 CVE-2008-4832 https://issues.rpath.com/browse/RPL-2857  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51085 JVNDB-2008-006395 rPath 上で稼動している initscripts における任意のファイルを削除される脆弱性 rPath 上で稼動している initscripts の rc.sysinit は、競合状態により、任意のファイルを削除される脆弱性が存在します。 CVE-2008-4832 34945 CVE-2008-4832 4646 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006395.html 2008-11-12 2012-12-20 View