PT-2019-6854 · Gambas · Gambas

Gambas · Published 2019-11-07 · Updated 2020-08-18 · CVE-2013-1809

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gambas versions prior to 3.4.0

Description The issue allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.

Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2013-1809

Affected Products

Gambas

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2013-1809 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-1809 · Vendor Advisory
• https://sourceforge.net/p/gambas/code/5438 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1809 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-1809 · Vendor Advisory
• http://openwall.com/lists/oss-security/2013/03/03/4 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1809 · Note
• https://access.redhat.com/security/cve/cve-2013-1809 · Note
• https://code.google.com/archive/p/gambas/issues/365 · Note