Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2008-4191 Details

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431	CVE
http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak	CVE
https://bugs.gentoo.org/show_bug.cgi?id=235770	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=460435	CVE
http://secunia.com/advisories/31880	CVE	Vendor Advisory
http://secunia.com/advisories/32071	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/45237	CVE
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html	CVE
http://www.openwall.com/lists/oss-security/2008/10/30/2	CVE
http://www.securityfocus.com/bid/31241	CVE
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431	[email protected]
http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak	[email protected]
https://bugs.gentoo.org/show_bug.cgi?id=235770	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=460435	[email protected]
http://secunia.com/advisories/31880	[email protected]	Vendor Advisory
http://secunia.com/advisories/32071	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/45237	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html	[email protected]
http://www.openwall.com/lists/oss-security/2008/10/30/2	[email protected]
http://www.securityfocus.com/bid/31241	[email protected]

CWE-ID	CWE Name	Source
CWE-59	Improper Link Resolution Before File Access ('Link Following')	[email protected]

Product	Versions
emacspeak inc emacspeak	26.0 28.0
CPE cpe:2.3:a:emacspeak_inc:emacspeak:26.0:::::::* cpe:2.3:a:emacspeak_inc:emacspeak:28.0:::::::* Remediation No remediation found in references.

6 change records found show changes

QUICK INFO