PT-2008-6148 · Ogle · Ogle+1
Stefan Behte
·
Publicado
2008-11-06
·
Atualizado
2017-08-08
·
CVE-2008-4976
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
ogle versions 0.9.2
ogle-mmx version 0.9.2
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on several temporary files, including /tmp/ogle audio.#####, /tmp/ogle cli.#####, /tmp/ogle ctrl.#####, /tmp/ogle gui.#####, /tmp/ogle mpeg ps.#####, /tmp/ogle mpeg vs.#####, /tmp/ogle nav.#####, and /tmp/ogle vout.#####, related to various debug scripts.
Recommendations
For ogle version 0.9.2, consider restricting access to the temporary files in /tmp to prevent symlink attacks.
For ogle-mmx version 0.9.2, consider restricting access to the temporary files in /tmp to prevent symlink attacks.
At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ogle
Ogle-Mmx