1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
Candidate: CVE-2008-4986
PublicDate: 2008-11-06
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4986
Description:
wims 3.62 allows local users to overwrite arbitrary files via a symlink
attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c)
/tmp/referer-home.log temporary files, related to the (1) coqweb and (2)
account.sh scripts.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
Patches_wims:
upstream_wims: released (3.62-13.1)
dapper_wims: ignored (reached end-of-life)
gutsy_wims: needed (reached end-of-life)
hardy_wims: ignored (reached end-of-life)
intrepid_wims: not-affected (3.62-13.1)
jaunty_wims: not-affected (3.62-13.1)
karmic_wims: not-affected (3.62-13.1)
lucid_wims: not-affected (3.62-13.1)
maverick_wims: not-affected (3.62-13.1)
natty_wims: not-affected (3.62-13.1)
oneiric_wims: not-affected (3.62-13.1)
devel_wims: not-affected (3.62-13.1)
|