CVE search · CVE-2014-2524
CVE-2014-2524
low 3.3
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-59
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | low 3.3 | AV:L/AC:M/Au:N/C:N/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- mageia · mageia
- gnu · readline
- opensuse · opensuse
- fedoraproject · fedora
References
- http://advisories.mageia.org/MGASA-2014-0319.htmlThird Party Advisory
- http://lists.gnu.org/archive/html/bug-readline/2014-03/msg00057.htmlPatchVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.htmlThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/579Mailing ListThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/587Mailing ListThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:154Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:132Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=1077023Issue Tracking
- https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135686.htmlThird Party Advisory
- http://advisories.mageia.org/MGASA-2014-0319.htmlThird Party Advisory
- http://lists.gnu.org/archive/html/bug-readline/2014-03/msg00057.htmlPatchVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.htmlThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/579Mailing ListThird Party Advisory
- http://seclists.org/oss-sec/2014/q1/587Mailing ListThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:154Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:132Broken Link
- https://bugzilla.redhat.com/show_bug.cgi?id=1077023Issue Tracking
- https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135686.htmlThird Party Advisory