Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.7
CVSSv2

CVE-2008-3524

Published: 29/09/2008 Updated: 08/08/2017
CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4
VMScore: 418
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

rc.sysinit in initscripts prior to 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat fedora 9

redhat initscripts 8.76.3

References

CWE-59http://secunia.com/advisories/32037http://www.securityfocus.com/bid/31385https://bugzilla.redhat.com/show_bug.cgi?id=458504https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01135.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=458652https://issues.rpath.com/browse/RPL-2857http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318http://secunia.com/advisories/32710https://exchange.xforce.ibmcloud.com/vulnerabilities/45402https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scriptingCVE-2024-5158XML external entityCVE-2024-4262CVE-2024-2036CVE-2024-4985CVE-2024-21791remote attackersCVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook