NVD

Id
9005  
Name
CVE-2011-2185  
Description
Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-07-26  
Modified Date
2011-08-02  
Seq
2011-2185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51666 9005 CVE-2011-2185 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629003  View
51667 9005 CVE-2011-2185 http://code.fabfile.org/projects/fabric/files/Fabric-1.1.0.tar.gz  View
51668 9005 CVE-2011-2185 FEDORA-2011-8964  View
51669 9005 CVE-2011-2185 [oss-security] 20110603 CVE Request -- fabric -- Use of insecure temporary file by uploading templates and projects to remote hosts  View
51670 9005 CVE-2011-2185 [oss-security] 20110606 Re: CVE Request -- fabric -- Use of insecure temporary file by uploading templates and projects to remote hosts  View
51671 9005 CVE-2011-2185 https://bugzilla.redhat.com/show_bug.cgi?id=710462  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34423 JVNDB-2011-004665 Fabric における任意のファイルを上書きされる脆弱性 Fabric には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2011-2185 50092 CVE-2011-2185 9005 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004665.html 2011-07-26 2012-03-27 View