CVE-2008-0525

Published Jan 31, 2008

Last updated 6 years ago

Overview

Description: PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-59

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F7A7C398-5356-45D6-AA5C-53E63BC88DCA"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.2:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE956C6E-C5CA-4581-9D06-533F5CFAEBE4"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.2:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3033F8C-FB42-4838-B944-FE24E2CFA022"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.2:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2CD08D1-5982-40E8-8B24-986710D2783A"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.3:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E6C795ED-9FF2-4597-BA46-95A21CCE7EFD"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.3:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CD18339F-3635-4DC5-AE03-475B1CDE4DD3"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.3:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F60919A1-946C-424B-A3FC-E276ECDBBB5D"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.4:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "829ECFA8-8D23-47E3-8AD1-ACE034E9F870"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.4:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D47A23C-75D3-4AA6-A5D3-68F819537CCC"
          },
          {
            "criteria": "cpe:2.3:a:lumension_security:patchlink_update:6.4:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C80615EC-D419-44A2-9FE5-B399D0568639"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "965B9986-DE06-406F-AAA8-DA9A91FD548D"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "48E534D2-F6C4-4E1A-90C9-659A02FAA02B"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D9CCF8F-B43E-4EEB-8425-6D04AA3EAA8F"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DCB9DBE8-3B84-4131-B376-8186D7951D15"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2498DE12-4CF9-4C02-A875-546075E712F9"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F1DAD3D-8DF1-48BC-AB54-F68651FEA2B8"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:linux:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6360AF99-4871-43BF-98B9-ED195913B29D"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:mac:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6F50520-BE7A-4AFB-9AF5-038466C73D8E"
          },
          {
            "criteria": "cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "69E0B7A0-2B99-4C4E-A1EA-3B4FEDC04D69"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References