Lucene search

K
nvd[email protected]NVD:CVE-2008-2958
HistoryJul 01, 2008 - 10:41 p.m.

CVE-2008-2958

2008-07-0122:41:00
CWE-362
web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.

Affected configurations

Nvd
Node
checkinstallcheckinstallMatch1.6.1
VendorProductVersionCPE
checkinstallcheckinstall1.6.1cpe:2.3:a:checkinstall:checkinstall:1.6.1:*:*:*:*:*:*:*

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2008-2958