Vulnerability Details : CVE-2008-5394
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.
Exploit prediction scoring system (EPSS) score for CVE-2008-5394
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-5394
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2008-5394
-
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.Assigned by: nvd@nist.gov (Primary)
Vendor statements for CVE-2008-5394
-
Red Hat 2008-12-18Not vulnerable. This issue did not affect the versions of the util-linux packages (providing /bin/login), as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.
-
http://security.gentoo.org/glsa/glsa-200903-24.xml
-
http://bugs.debian.org/505071
-
http://www.securityfocus.com/archive/1/498769/100/0/threaded
-
http://securityreason.com/securityalert/4695
-
https://www.exploit-db.com/exploits/7313
-
http://bugs.debian.org/505271
-
http://bugs.debian.org/332198
-
http://www.securityfocus.com/bid/32552
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/47037
-
http://www.ubuntu.com/usn/usn-695-1
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:062
- cpe:2.3:a:debian:shadow:4.0.18.1:*:*:*:*:*:*:*