7.5

CVE-2009-5054

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Smarty ≫ Smarty Version <= 2.6.26
Smarty ≫ Smarty Version 1.0
Smarty ≫ Smarty Version 1.0a
Smarty ≫ Smarty Version 1.0b
Smarty ≫ Smarty Version 1.1.0
Smarty ≫ Smarty Version 1.2.0
Smarty ≫ Smarty Version 1.2.1
Smarty ≫ Smarty Version 1.2.2
Smarty ≫ Smarty Version 1.3.0
Smarty ≫ Smarty Version 1.3.1
Smarty ≫ Smarty Version 1.3.2
Smarty ≫ Smarty Version 1.4.0
Smarty ≫ Smarty Version 1.4.0 Update b1
Smarty ≫ Smarty Version 1.4.0 Update b2
Smarty ≫ Smarty Version 1.4.1
Smarty ≫ Smarty Version 1.4.2
Smarty ≫ Smarty Version 1.4.3
Smarty ≫ Smarty Version 1.4.4
Smarty ≫ Smarty Version 1.4.5
Smarty ≫ Smarty Version 1.4.6
Smarty ≫ Smarty Version 1.5.0
Smarty ≫ Smarty Version 1.5.1
Smarty ≫ Smarty Version 1.5.2
Smarty ≫ Smarty Version 2.0.0
Smarty ≫ Smarty Version 2.0.1
Smarty ≫ Smarty Version 2.1.0
Smarty ≫ Smarty Version 2.1.1
Smarty ≫ Smarty Version 2.2.0
Smarty ≫ Smarty Version 2.3.0
Smarty ≫ Smarty Version 2.3.1
Smarty ≫ Smarty Version 2.4.0
Smarty ≫ Smarty Version 2.4.1
Smarty ≫ Smarty Version 2.4.2
Smarty ≫ Smarty Version 2.5.0
Smarty ≫ Smarty Version 2.5.0 Update rc1
Smarty ≫ Smarty Version 2.5.0 Update rc2
Smarty ≫ Smarty Version 2.6.0
Smarty ≫ Smarty Version 2.6.0 Update rc1
Smarty ≫ Smarty Version 2.6.0 Update rc2
Smarty ≫ Smarty Version 2.6.0 Update rc3
Smarty ≫ Smarty Version 2.6.1
Smarty ≫ Smarty Version 2.6.2
Smarty ≫ Smarty Version 2.6.3
Smarty ≫ Smarty Version 2.6.4
Smarty ≫ Smarty Version 2.6.5
Smarty ≫ Smarty Version 2.6.6
Smarty ≫ Smarty Version 2.6.7
Smarty ≫ Smarty Version 2.6.9
Smarty ≫ Smarty Version 2.6.10
Smarty ≫ Smarty Version 2.6.11
Smarty ≫ Smarty Version 2.6.12
Smarty ≫ Smarty Version 2.6.13
Smarty ≫ Smarty Version 2.6.14
Smarty ≫ Smarty Version 2.6.15
Smarty ≫ Smarty Version 2.6.16
Smarty ≫ Smarty Version 2.6.17
Smarty ≫ Smarty Version 2.6.18
Smarty ≫ Smarty Version 2.6.20
Smarty ≫ Smarty Version 2.6.22
Smarty ≫ Smarty Version 2.6.24
Smarty ≫ Smarty Version 2.6.25
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt