Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Pedro Villavicencio

#33225de 53,635
7.8CVSS total
Vulnerabilidades · 1
PT-2009-5602
7.8
2009-09-22
Gnome · Nautilus · CVE-2009-3289
**Name of the Vulnerable Software and Affected Versions** glib version 2.0 **Description** The issue allows user-assisted local users to modify files of other users. This is demonstrated by using Nautilus to modify the permissions of the user home directory. The `g file copy` function sets the permissions of a target file to the permissions of a symbolic link, which has permissions set to 777. **Recommendations** For glib version 2.0, consider restricting the use of the `g file copy` function until a patch is available to prevent unintended permission changes. As a temporary workaround, avoid using Nautilus to modify file permissions to minimize the risk of exploitation.