6.3

CVE-2011-3616

Exploit
The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Conky ≫ Conky Version <= 1.8.1
Conky ≫ Conky Version1.1
Conky ≫ Conky Version1.2
Conky ≫ Conky Version1.3.0
Conky ≫ Conky Version1.3.1
Conky ≫ Conky Version1.3.2
Conky ≫ Conky Version1.3.3
Conky ≫ Conky Version1.3.4
Conky ≫ Conky Version1.3.5
Conky ≫ Conky Version1.4.0
Conky ≫ Conky Version1.4.1
Conky ≫ Conky Version1.4.2
Conky ≫ Conky Version1.4.3
Conky ≫ Conky Version1.4.4
Conky ≫ Conky Version1.4.5
Conky ≫ Conky Version1.4.6
Conky ≫ Conky Version1.4.7
Conky ≫ Conky Version1.4.8
Conky ≫ Conky Version1.4.9
Conky ≫ Conky Version1.5.0
Conky ≫ Conky Version1.5.1
Conky ≫ Conky Version1.6.0
Conky ≫ Conky Version1.6.1
Conky ≫ Conky Version1.7.0
Conky ≫ Conky Version1.7.1
Conky ≫ Conky Version1.7.1.1
Conky ≫ Conky Version1.7.2
Conky ≫ Conky Version1.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.3 3.4 9.2
AV:L/AC:M/Au:N/C:N/I:C/A:C
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.