PT-2017-10394 · Flightgear+2 · Flightgear+2

Florent Rougon + 1 · Publicado 2016-12-20 · Atualizado 2024-06-15 · CVE-2016-9956

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FlightGear versions prior to 2016.4.4

Description The issue allows remote attackers to write to arbitrary files via a crafted Nasal script, which is related to the route manager in FlightGear.

Recommendations For versions prior to 2016.4.4, update to version 2016.4.4 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2018-1974

CVE-2016-9956

DSA-3742-1

MGASA-2017-0011

OPENSUSE-SU-2024:10595-1

USN-4588-1

Produtos afetados

Alt Linux

Flightgear

Ubuntu

Referências · 26

• https://ubuntu.com/security/CVE-2016-9956 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-9956 · Nota
• http://securityfocus.com/bid/94945 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZKAN7V6UOHSRFWO567XMN4O6WXTSL32 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-9956 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9956 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9956 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0011 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9956 · Nota de Segurança
• http://openwall.com/lists/oss-security/2016/12/15/10 · Correção
• http://openwall.com/lists/oss-security/2016/12/14/11 · Correção
• https://osv.dev/vulnerability/openSUSE-SU-2024:10595-1 · Aviso do Fabricante
• https://sourceforge.net/projects/flightgear/files/release-2016.4 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9956 · Aviso do Fabricante
• http://debian.org/security/2016/dsa-3742 · Aviso do Fabricante