CVE-2011-0007

2011-01-1103:00:05

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

Percentile

5.1%

JSON

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal is sent, or (2) pimd.cache when USR2 is sent.

OSVersionArchitecturePackageVersionFilename
Debian12allpimd< 2.1.6-1pimd_2.1.6-1_all.deb
Debian11allpimd< 2.1.6-1pimd_2.1.6-1_all.deb
Debian999allpimd< 2.1.6-1pimd_2.1.6-1_all.deb
Debian13allpimd< 2.1.6-1pimd_2.1.6-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pimd	< 2.1.6-1	pimd_2.1.6-1_all.deb
Debian	11	all	pimd	< 2.1.6-1	pimd_2.1.6-1_all.deb
Debian	999	all	pimd	< 2.1.6-1	pimd_2.1.6-1_all.deb
Debian	13	all	pimd	< 2.1.6-1	pimd_2.1.6-1_all.deb