NVD

Id
500  
Name
CVE-2008-0525  
Description
PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-31  
Modified Date
2011-08-23  
Seq
2008-0525  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
3308 500 CVE-2008-0525 3599  View
3309 500 CVE-2008-0525 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527  View
3310 500 CVE-2008-0525 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528  View
3311 500 CVE-2008-0525 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530  View
3312 500 CVE-2008-0525 20080125 Two vulnerabilities for PatchLink Update Client for Unix.  View
3313 500 CVE-2008-0525 27458  View
3314 500 CVE-2008-0525 1019272  View
3315 500 CVE-2008-0525 ADV-2008-0426  View
3316 500 CVE-2008-0525 patchlinkupdate-logtrimmer-symlink(39956)  View
3317 500 CVE-2008-0525 patchlinkupdate-reboottask-symlink(39958)  View
3318 500 CVE-2008-0525 https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48711 JVNDB-2008-004021 LUM の Novell ZENworks Patch Management Update Agent における任意のコードを実行される脆弱性 Linux/Unix/Mac (LUM) の Novell ZENworks Patch Management Update Agent で使用される Unix の PatchLink Update クライアントには、任意のファイルを短縮される、および任意のコードを実行される脆弱性が存在します。 CVE-2008-0525 30638 CVE-2008-0525 500 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004021.html 2008-01-31 2012-09-25 View