PT-2005-2873 · Kpopper · Popper

Publicado 2005-07-05 · Atualizado 2008-09-05 · CVE-2005-1917

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions kpopper versions 1.0 and earlier

Description The issue allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file.

Recommendations For versions 1.0 and earlier, consider restricting access to the temporary file .popper-new to prevent symlink attacks until a patch is available.

Correção

Identificadores relacionados

CVE-2005-1917

Produtos afetados

Popper

Referências · 2

• http://zataz.net/adviso/kpopper-06152005.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1917 · Nota de Segurança