ByteOS Network

NVD Vulnerability Details :

CVE-2008-4191

Modified

Source-cve@mitre.org

Published At-24 Sep, 2008 | 11:42

Updated At-08 Aug, 2017 | 01:32

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.6	MEDIUM	AV:L/AC:L/Au:N/C:N/I:C/A:C

CPE Matches

emacspeak_inc>>emacspeak>>26.0

cpe:2.3:a:emacspeak_inc:emacspeak:26.0:*:*:*:*:*:*:*

emacspeak_inc>>emacspeak>>28.0

cpe:2.3:a:emacspeak_inc:emacspeak:28.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-59	Primary	nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2008-10-17T00:00:00

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=460435 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/

References

Hyperlink	Source	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431	cve@mitre.org	N/A
http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak	cve@mitre.org	N/A
http://secunia.com/advisories/31880	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32071	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/30/2	cve@mitre.org	N/A
http://www.securityfocus.com/bid/31241	cve@mitre.org	N/A
https://bugs.gentoo.org/show_bug.cgi?id=235770	cve@mitre.org	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=460435	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45237	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History