Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2009-5054

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

PublishedFeb 03, 2011, 17:00

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

smarty/smarty(Packagist)03.0.0-beta4N/A

References

http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt

Weakness Type

CWE-264

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)