Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1200
HistoryJan 23, 2015 - 12:00 a.m.

CVE-2015-1200

2015-01-2300:00:00
ubuntu.com
ubuntu.com
9

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the
output file when compressing a file before changing the permission to match
the original file, which allows local users to bypass the intended access
restrictions.

Bugs

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%