CVE-2011-1031

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-1031
The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability : 3.4 / Impact : 4.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/43221 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=676389 Patch
https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40 Patch
https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 Patch
https://github.com/derf/feh/issues/#issue/32 Patch
http://secunia.com/advisories/43221 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=676389 Patch
https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40 Patch
https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 Patch
https://github.com/derf/feh/issues/#issue/32 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:feh_project:feh:*:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.5:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.6:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.7:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.8:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.9:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.10:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.10.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.11:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.11.1:*:*:*:*:*:*:*
History

21 Nov 2024, 01:25

Type Values Removed Values Added
References () http://secunia.com/advisories/43221 - Vendor Advisory () http://secunia.com/advisories/43221 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=676389 - Patch () https://bugzilla.redhat.com/show_bug.cgi?id=676389 - Patch
References () https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40 - Patch () https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40 - Patch
References () https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - Patch () https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 - Patch
References () https://github.com/derf/feh/issues/#issue/32 - Patch () https://github.com/derf/feh/issues/#issue/32 - Patch
Information

Published : 2011-02-14 22:00

Updated : 2025-04-11 00:51

NVD link : CVE-2011-1031

Mitre link : CVE-2011-1031

CVE.ORG link : CVE-2011-1031

JSON object : View

Products Affected

feh_project

  • feh
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')