CVE-2010-1438

{"id": "CVE-2010-1438", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.4, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-05-06T14:53:01.390", "references": [{"url": "http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=8", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/27/6", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/28/3", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/39760", "source": "secalert@redhat.com"}, {"url": "http://code.google.com/p/webapplicationfingerprinter/issues/detail?id=8", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/27/6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/28/3", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/39760", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Web Application Finger Printer (WAFP) 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which (1) allows local users to cause a denial of service (application outage) by creating a file with a pathname that the product expects is available for its own internal use, (2) allows local users to overwrite arbitrary files via symlink attacks on certain files in /tmp, (3) might allow local users to delete arbitrary files and directories via a symlink attack on a directory under /tmp, and (4) might make it easier for local users to obtain sensitive information by reading files in a directory under /tmp, related to (a) lib/wafp_pidify.rb, (b) utils/generate_wafp_fingerprint.sh, (c) utils/online_update.sh, and (d) utils/extract_from_db.sh."}, {"lang": "es", "value": "Web Application Finger Printer (WAFP) v0.01-26c3, emplea nombres de ruta fijos bajo /tmp para los archivos y directorios temporales, que (1) permite a usuarios locales provocar una denegaci\u00f3n de servicio (agotamiento de aplicaci\u00f3n) mediante la creaci\u00f3n de un archivo con un nombre de ruta que el producto espera que est\u00e9 disponible para su uso interno, (2) permite a usuarios locales sobrescribir archivos de su elecci\u00f3n a trav\u00e9s de ataques de enlace simb\u00f3lico sobre determinados archivos en /tmp, (3) podr\u00eda permitir a usuarios locales eliminar archivos y directorios a trav\u00e9s de un ataque de enlace simb\u00f3lico bajo /tmp, y(4)podr\u00eda facilitar a usuarios locales obtener informaci\u00f3n sensible mediante la lectura de archivos y directorios en /tmp, relacionado con (a) lib/wafp_pidify.rb, (b) utils/generate_wafp_fingerprint.sh, (c) utils/online_update.sh, y(d) utils/extract_from_db.sh."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mytty:webapplication_finger_printer:0.01-26c3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A777B787-62C3-4245-BBBA-1300AC54507E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}