Iglues : Security Vulnerabilities, CVEs, CVSS score >= 5
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.
Max CVSS
6.9
EPSS Score
0.04%
Published
2008-11-05
Updated
2009-07-21
1 vulnerabilities found