Lucene search

RedhatCVE-2008-3524

HistorySep 29, 2008 - 5:17 p.m.

CVE-2008-3524

2008-09-2917:17:29

CWE-59

redhat

web.nvd.nist.gov

cve-2008-3524

initscripts

symlink attack

file deletion

fedora 9

linux

security vulnerability

nvd

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.

Affected configurations

Nvd

Node

redhatfedoraMatch9

AND

redhatinitscriptsMatch8.76.3

VendorProductVersionCPE
redhatfedora9cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*
redhatinitscripts8.76.3cpe:2.3:a:redhat:initscripts:8.76.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	fedora	9	cpe:2.3:o:redhat:fedora:9:::::::*
redhat	initscripts	8.76.3	cpe:2.3:a:redhat:initscripts:8.76.3:::::::*

References

secunia.com/advisories/32037

secunia.com/advisories/32710

wiki.rpath.com/wiki/Advisories:rPSA-2008-0318

www.securityfocus.com/bid/31385

bugzilla.redhat.com/show_bug.cgi?id=458504

bugzilla.redhat.com/show_bug.cgi?id=458652

exchange.xforce.ibmcloud.com/vulnerabilities/45402

issues.rpath.com/browse/RPL-2857

www.redhat.com/archives/fedora-package-announce/2008-September/msg01135.html

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2008-3524