CVE-2009-1299
Severity Score
6.9
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.
La v0.9.10 y v0.9.19 permite a usuarios locales modificar el propietario y permisos de ficheros de su elección a través de ataque de enlaces simbólicos sobre un fichero temporal /tmp/.esd-#####.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-04-15 CVE Reserved
- 2010-03-16 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573615 | X_refsource_misc | |
| http://git.0pointer.de/?p=pulseaudio.git%3Ba=patch%3Bh=d3efa43d85ac132c6a5a416a2b6f2115f5d577ee | X_refsource_confirm | |
| http://www.vupen.com/english/advisories/2010/1570 | Vdb Entry | |
| https://bugs.edge.launchpad.net/ubuntu/+source/pulseaudio/+bug/509008 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2010/dsa-2017 | 2023-11-07 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2010:124 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Pulseaudio Search vendor "Pulseaudio" | Pulseaudio Search vendor "Pulseaudio" for product "Pulseaudio" | 0.9.10 Search vendor "Pulseaudio" for product "Pulseaudio" and version "0.9.10" | - |
Affected
| ||||||
| Pulseaudio Search vendor "Pulseaudio" | Pulseaudio Search vendor "Pulseaudio" for product "Pulseaudio" | 0.9.19 Search vendor "Pulseaudio" for product "Pulseaudio" and version "0.9.19" | - |
Affected
| ||||||