CVE-2009-0313 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.9 UNKNOWN	LOCAL	MEDIUM		AV:L/AC:M/Au:N/C:C/I:C/A:C
mitre	CNA	---				---
CVE	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 5%

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

http://code.google.com/p/winezeug/source/detail?r=253

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

http://osvdb.org/51619

http://www.securityfocus.com/bid/33474

https://exchange.xforce.ibmcloud.com/vulnerabilities/48320

http://code.google.com/p/winezeug/source/detail?r=253

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

http://osvdb.org/51619

http://www.securityfocus.com/bid/33474

https://exchange.xforce.ibmcloud.com/vulnerabilities/48320