CVE-2008-4938 - OpenCVE

aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:L/AC:M/Au:N/C:C/I:C/A:C

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Aegis	Aegis Aegis-web

Configuration 1 [-]

OR	cpe:2.3:a:aegis:aegis:4.24:::::::*
	cpe:2.3:a:aegis:aegis-web:4.24:::::::*

No data.

References

Link	Providers
http://bugs.debian.org/496400
http://bugs.debian.org/496402
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402
http://dev.gentoo.org/~rbu/security/debiantemp/aegis
http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web
http://secunia.com/advisories/31970
http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224
http://uvw.ru/report.lenny.txt
http://www.openwall.com/lists/oss-security/2008/10/30/2
http://www.securityfocus.com/bid/30883
https://bugs.gentoo.org/show_bug.cgi?id=235770
https://exchange.xforce.ibmcloud.com/vulnerabilities/44835

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-11-05T14:51:00

Updated: 2024-08-07T10:31:28.295Z

Reserved: 2008-11-05T00:00:00

Link: CVE-2008-4938

Vulnrichment

No data.

NVD

Status : Modified

Published: 2008-11-05T15:00:14.853

Modified: 2017-08-08T01:33:00.517

Link: CVE-2008-4938

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-08-11T00:00:00", "descriptions": [{"lang": "en", "value": "aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis"}, {"name": "aegis-aegis-symlink(44835)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44835"}, {"name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"}, {"tags": ["x_refsource_MISC"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402"}, {"name": "30883", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/30883"}, {"tags": ["x_refsource_MISC"], "url": "http://uvw.ru/report.lenny.txt"}, {"name": "31970", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31970"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/496402"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/496400"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-4938", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis", "refsource": "CONFIRM", "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis"}, {"name": "aegis-aegis-symlink(44835)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44835"}, {"name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"}, {"name": "https://bugs.gentoo.org/show_bug.cgi?id=235770", "refsource": "CONFIRM", "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402", "refsource": "MISC", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402"}, {"name": "30883", "refsource": "BID", "url": "http://www.securityfocus.com/bid/30883"}, {"name": "http://uvw.ru/report.lenny.txt", "refsource": "MISC", "url": "http://uvw.ru/report.lenny.txt"}, {"name": "31970", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31970"}, {"name": "http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224", "refsource": "CONFIRM", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224"}, {"name": "http://bugs.debian.org/496402", "refsource": "CONFIRM", "url": "http://bugs.debian.org/496402"}, {"name": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web", "refsource": "CONFIRM", "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web"}, {"name": "http://bugs.debian.org/496400", "refsource": "CONFIRM", "url": "http://bugs.debian.org/496400"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T10:31:28.295Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis"}, {"name": "aegis-aegis-symlink(44835)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44835"}, {"name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402"}, {"name": "30883", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/30883"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://uvw.ru/report.lenny.txt"}, {"name": "31970", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31970"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/496402"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/496400"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-4938", "datePublished": "2008-11-05T14:51:00", "dateReserved": "2008-11-05T00:00:00", "dateUpdated": "2024-08-07T10:31:28.295Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aegis:aegis:4.24:*:*:*:*:*:*:*", "matchCriteriaId": "2FFCD28D-5DBF-4E38-ACB6-4BC3A9D4ACFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:aegis:aegis-web:4.24:*:*:*:*:*:*:*", "matchCriteriaId": "063221AD-E39B-4F2F-BB7E-914308BC0970", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts."}, {"lang": "es", "value": "aegis v4.24 y aegis-web v4.24, permiten a usuarios locales sobrescribir ficheros de su elecci\u00f3n a trav\u00e9s de un ataque de enlace simb\u00f3lico sobre los ficheros temporales (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log y (h) /tmp/aegis.#####.out. Est\u00e1 relacionado con los scripts (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi."}], "id": "CVE-2008-4938", "lastModified": "2017-08-08T01:33:00.517", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-11-05T15:00:14.853", "references": [{"source": "cve@mitre.org", "url": "http://bugs.debian.org/496400"}, {"source": "cve@mitre.org", "url": "http://bugs.debian.org/496402"}, {"source": "cve@mitre.org", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496402"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis"}, {"source": "cve@mitre.org", "url": "http://dev.gentoo.org/~rbu/security/debiantemp/aegis-web"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/31970"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=2079025&group_id=224&atid=100224"}, {"source": "cve@mitre.org", "url": "http://uvw.ru/report.lenny.txt"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/30883"}, {"source": "cve@mitre.org", "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44835"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}], "source": "nvd@nist.gov", "type": "Primary"}]}