Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-2093
HistoryMay 18, 2012 - 10:55 p.m.

CVE-2012-2093

2012-05-1822:55:02
Debian Security Bug Tracker
security-tracker.debian.org
19

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%