Lucene search

K
cveMitreCVE-2008-4944
HistoryNov 05, 2008 - 3:00 p.m.

CVE-2008-4944

2008-11-0515:00:15
CWE-59
mitre
web.nvd.nist.gov
24
cve
2008
4944
cdcontrol
symlink attack
file overwrite
temporary files
nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder*-out temporary files.

Affected configurations

Nvd
Node
gleydson_mazioli_da_silvacdcontrolMatch1.90
VendorProductVersionCPE
gleydson_mazioli_da_silvacdcontrol1.90cpe:2.3:a:gleydson_mazioli_da_silva:cdcontrol:1.90:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2008-4944