Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ole Tange

#38156of 53,633
7.2Total CVSS
Vulnerabilities · 2
Low
2
PT-2015-6435
3.6
2015-04-23
Gnu · Gnu Parallel · CVE-2015-4155
**Name of the Vulnerable Software and Affected Versions** GNU Parallel versions prior to 20150422 **Description** The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using certain options, including `--pipe`, `--tmux`, `--cat`, `--fifo`, or `--compress`. **Recommendations** For GNU Parallel versions prior to 20150422, update to a version 20150422 or later to resolve the issue. As a temporary workaround, consider avoiding the use of options `--pipe`, `--tmux`, `--cat`, `--fifo`, or `--compress` until a patch is available. Restrict access to temporary files to minimize the risk of exploitation.
PT-2015-6436
3.6
2015-04-23
Gnu · Gnu Parallel · CVE-2015-4156
**Name of the Vulnerable Software and Affected Versions** GNU Parallel versions prior to 20150522 **Description** The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using (1) `--cat` or (2) `--fifo` with `--sshlogin`. **Recommendations** For GNU Parallel versions prior to 20150522, update to a version 20150522 or later to resolve the issue.