Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Log in Get Assessment

Vulnerability IntelligenceCVE-2008-4936

CVE-2008-4936

UNKNOWN

faxspool in mgetty 1

Published Nov 5, 2008

Modified 1 years ago

Details

faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.

References

WEB

http://bugs.debian.org/496403

WEB

http://dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax

ADVISORY

http://secunia.com/advisories/33051

ADVISORY

http://security.gentoo.org/glsa/glsa-200812-08.xml

WEB

http://uvw.ru/report.lenny.txt

WEB

http://www.openwall.com/lists/oss-security/2008/10/30/2

WEB

http://www.securityfocus.com/bid/30927

WEB

https://bugs.gentoo.org/show_bug.cgi?id=235770

WEB

https://bugs.gentoo.org/show_bug.cgi?id=235806

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/44833

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2008-4936

CVSS Analysis

CVSS v2.0

6.9

Exploitability

Access Vector

LocalAV:L

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedNov 5, 2008

ModifiedAug 7, 2024

CVE-2008-4936 | Mondoo Vulnerability Intelligence