CVE-2008-5157

EUVD-2008-5135
tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.*.##### or (2) /tmp/makefile.tau*.##### temporary file, related to the (a) tau_cxx, (b) tau_f90, and (c) tau_cc scripts.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
Affected Products (NVD)
VendorProductVersion
uoregontau
2.16.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tau
dapper
ignored
gutsy
ignored
hardy
ignored
intrepid
ignored
jaunty
ignored
karmic
ignored
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506348
http://lists.debian.org/debian-devel/2008/08/msg00347.html
http://secunia.com/advisories/32821
http://uvw.ru/report.sid.txt
http://www.securityfocus.com/bid/32404
https://exchange.xforce.ibmcloud.com/vulnerabilities/46704
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506348
http://lists.debian.org/debian-devel/2008/08/msg00347.html
http://secunia.com/advisories/32821
http://uvw.ru/report.sid.txt
http://www.securityfocus.com/bid/32404
https://exchange.xforce.ibmcloud.com/vulnerabilities/46704