PT-2007-6133 · Dibbler · Dibbler

Publicado 2007-09-21 · Atualizado 2008-09-05 · CVE-2007-5028

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dibbler version 0.6.0

Description The issue concerns weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and can be exploited through local attack vectors.

Recommendations For Dibbler version 0.6.0, consider changing the permissions of the files in /var/lib/dibbler to prevent world-writable access until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-5028

Produtos afetados

Dibbler

Referências · 5

• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5028 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5028 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2007-5028 · Aviso do Fabricante
• http://klub.com.pl/dhcpv6 · Correção
• https://osv.dev/vulnerability/CVE-2007-5028 · Aviso do Fabricante