ID CVE-2006-6939
Summary GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open_sbuf function.
References
Vulnerable Configurations
  • cpe:2.3:a:gnu:ed:-:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:ed:-:*:*:*:*:*:*:*
  • cpe:2.3:a:gnu:ed:0.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:ed:0.2:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 29-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 22129
confirm
fedora
  • FEDORA-2007-099
  • FEDORA-2007-100
mandriva MDKSA-2007:023
secunia
  • 23832
  • 23848
  • 23857
  • 24054
trustix 2007-0005
vupen ADV-2006-4573
xf gnued-opensbuf-symlink(30374)
statements via4
contributor Mark J Cox
lastmodified 2007-01-18
organization Red Hat
statement Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=223072 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.
Last major update 29-07-2017 - 01:29
Published 17-01-2007 - 00:28
Last modified 29-07-2017 - 01:29
Back to Top