7.2

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libvirt ≫ Libvirt Version 0.3.2
Libvirt ≫ Libvirt Version 0.3.3
Libvirt ≫ Libvirt Version 0.4.1
Libvirt ≫ Libvirt Version 0.4.2
Libvirt ≫ Libvirt Version 0.4.6
Libvirt ≫ Libvirt Version 0.5.0
Libvirt ≫ Libvirt Version 0.5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.299
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://osvdb.org/50919
http://secunia.com/advisories/33198
http://secunia.com/advisories/33217
Vendor Advisory
http://secunia.com/advisories/33292
http://secunia.com/advisories/34397
http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00938.html
http://www.redhat.com/support/errata/RHSA-2009-0382.html
http://www.securityfocus.com/bid/32905
Patch
http://www.ubuntu.com/usn/usn-694-1
https://bugzilla.redhat.com/show_bug.cgi?id=476560
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8765
https://www.redhat.com/archives/libvir-list/2008-December/msg00522.html