PT-2009-1031 · Debian+1 · Debian+1

James Stone · Publicado 2009-04-09 · Atualizado 2009-04-16 · CVE-2009-1253

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tunapie version 2.1 Tunapie (affected versions not specified) in Debian GNU/Linux

Description The issue allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file. Additionally, there are multiple vulnerabilities in the Tunapie package of the Debian GNU/Linux operating system that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information.

Recommendations For Tunapie version 2.1, consider restricting access to temporary files to prevent symlink attacks until a patch is available. For Tunapie in Debian GNU/Linux, restrict remote access to the Tunapie package to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

BDU:2015-03455

CVE-2009-1253

DSA-1764-1

Produtos afetados

Debian

Tunapie

Referências · 12

• http://vupen.com/english/advisories/2009/0972 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1253 · Nota de Segurança
• http://debian.org/security/2009/dsa-1764 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1253 · Nota de Segurança
• http://securityfocus.com/bid/34417 · Nota
• https://bdu.fstec.ru/vul/2015-03455 · Nota de Segurança
• http://debian.org/security/dsa-1764 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1254 · Nota de Segurança
• http://osvdb.org/53426 · Nota
• https://launchpad.net/bugs/cve/2009-1253 · Nota
• https://launchpad.net/bugs/314591 · Nota
• http://secunia.com/advisories/34643 · Nota