Lucene search
Ubuntu.comUB:CVE-2008-4190HistorySep 24, 2008 - 12:00 a.m.
CVE-2008-4190
2008-09-2400:00:00
ubuntu.com
ubuntu.com
10
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
EPSS
0
Percentile
0.4%
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through
2.6.16, allows local users to overwrite arbitrary files and execute
arbitrary code via a symlink attack on the (1) ipseclive.conn and (2)
ipsec.olts.remote.log temporary files. NOTE: in many distributions and the
upstream version, this tool has been disabled.
Related
gentoo
gentoo
Openswan: Insecure temporary file creation
2009-03-09 00:00:00
exploitpack
exploitpack
Openswan 2.4.122.6.16 - Insecure Temp File Creation Privilege Escalation
2009-07-13 00:00:00
seebug
seebug
Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit
2009-07-14 00:00:00
Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit
2014-07-01 00:00:00
exploitdb
exploitdb
Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation
2009-07-13 00:00:00
prion
prion
Design/Logic Flaw
2008-09-24 11:42:00
nvd
nvd
CVE-2008-4190
2008-09-24 11:42:25
cve
cve
CVE-2008-4190
2008-09-24 11:42:25
packetstorm
packetstorm
Openswan Insecure File Creation
2009-07-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200903-18 (openswan)
2009-03-13 00:00:00
Gentoo Security Advisory GLSA 200903-18 (openswan)
2009-03-13 00:00:00
CentOS Security Advisory CESA-2009:0402 (openswan)
2009-04-15 00:00:00
veracode
veracode
Arbitrary File Overwrite
2020-04-10 00:31:21
zdt
zdt
Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit
2009-07-13 00:00:00
cvelist
cvelist
CVE-2008-4190
2008-09-24 10:00:00
nessus
nessus
GLSA-200903-18 : Openswan: Insecure temporary file creation
2009-03-10 00:00:00
Scientific Linux Security Update : openswan on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : openswan (RHSA-2009:0402)
2009-03-31 00:00:00
redhat
redhat
(RHSA-2009:0402) Important: openswan security update
2009-03-30 00:00:00
osv
osv
openswan - denial of service
2009-03-30 00:00:00
centos
centos
openswan security update
2009-04-09 10:33:25
debian
debian
[SECURITY] [DSA 1760-1] New openswan packages fix denial of service
2009-03-30 23:49:43
oraclelinux
oraclelinux
openswan security update
2009-03-30 00:00:00
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
EPSS
0
Percentile
0.4%
Related for UB:CVE-2008-4190