NVD

Id
48586  
Name
CVE-2009-1299  
Description
The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-03-18  
Modified Date
2010-06-29  
Seq
2009-1299  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245031 48586 CVE-2009-1299 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573615  View
245032 48586 CVE-2009-1299 http://git.0pointer.de/?p=pulseaudio.git;a=patch;h=d3efa43d85ac132c6a5a416a2b6f2115f5d577ee  View
245033 48586 CVE-2009-1299 DSA-2017  View
245034 48586 CVE-2009-1299 MDVSA-2010:124  View
245035 48586 CVE-2009-1299 ADV-2010-1570  View
245036 48586 CVE-2009-1299 https://bugs.edge.launchpad.net/ubuntu/+source/pulseaudio/+bug/509008  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39244 JVNDB-2010-005029 PulseAudio の core-util.c における任意のファイルのパーミッションを変更される脆弱性 PulseAudio の core-util.c の pa_make_secure_dir 関数には、任意のファイルの所有権およびパーミッションを変更される脆弱性が存在します。 CVE-2009-1299 38730 CVE-2009-1299 48586 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005029.html 2010-03-18 2012-12-20 View