PT-2007-7030 · Unknown · Scanbuttond

Publicado 2007-11-26 · Atualizado 2011-03-08 · CVE-2007-6131

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions scanbuttond version 0.2.3

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files created by buttonpressed.sh in scanbuttond.

Recommendations For scanbuttond version 0.2.3, consider restricting access to the temporary files scan.pnm and scan.jpg to prevent a symlink attack until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2007-6131

Produtos afetados

Scanbuttond

Referências · 7

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=383131 · Exploit
• http://secunia.com/advisories/27847 · Nota
• http://securityfocus.com/bid/26617 · Nota
• http://osvdb.org/42422 · Nota
• http://vupen.com/english/advisories/2007/4024 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6131 · Nota de Segurança
• http://securitytracker.com/id?1019007 · Nota