NVD

Id
5167  
Name
CVE-2008-5394  
Description
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-08  
Modified Date
2009-09-15  
Seq
2008-5394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
32518 5167 CVE-2008-5394 http://bugs.debian.org/332198  View
32519 5167 CVE-2008-5394 http://bugs.debian.org/505071  View
32520 5167 CVE-2008-5394 http://bugs.debian.org/505271  View
32521 5167 CVE-2008-5394 GLSA-200903-24  View
32522 5167 CVE-2008-5394 4695  View
32523 5167 CVE-2008-5394 MDVSA-2009:062  View
32524 5167 CVE-2008-5394 7313  View
32525 5167 CVE-2008-5394 20081130 /bin/login gives root to group utmp  View
32526 5167 CVE-2008-5394 32552  View
32527 5167 CVE-2008-5394 USN-695-1  View
32528 5167 CVE-2008-5394 debian-login-symlink(47037)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48391 JVNDB-2008-003701 Debian GNU/Linux などの shadow の /bin/login における任意のファイルを上書きされる脆弱性 Debian GNU/Linux および他の Linux ディストリビューションの shadow の /bin/login には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-5394 35507 CVE-2008-5394 5167 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003701.html 2008-11-09 2012-06-26 View