PT-2008-4913 · Unknown · Initscripts

Herbert Poetzl + 1 · Publicado 2008-09-29 · Atualizado 2017-08-08 · CVE-2008-3524

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions initscripts versions prior to 8.76.3-1

Description The issue allows local users to delete arbitrary files via a symlink attack on a file or directory under /var/lock or /var/run. This is due to a vulnerability in the rc.sysinit script in initscripts.

Recommendations For initscripts versions prior to 8.76.3-1, update to version 8.76.3-1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/lock and /var/run directories to minimize the risk of exploitation.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2008-3524

Produtos afetados

Initscripts

Referências · 10

• http://secunia.com/advisories/32037 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=458504 · Nota
• https://issues.rpath.com/browse/RPL-2857 · Nota
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3524 · Nota de Segurança
• http://secunia.com/advisories/32710 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-September/msg01135.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45402 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=458652 · Nota
• http://securityfocus.com/bid/31385 · Nota