Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.

VectorLOCAL

PublishedMay 06, 2016, 17:59

Published Bysecurity@debian.org

Base Score

Score3.3

No affected versions found.

CWE-59

Base Score

3.3

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Base SeverityLow

Version

3.0

Attack Vector (AV)

LOCAL