CVE-2008-2389
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
openSUSE 10.2版本中的opensuse-updater本地用户可以借助一个symlink攻击，访问任意文件。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-2389
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
opensuse-updater Symbolic Link 本地信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
openSUSE 10.2版本中的opensuse-updater本地用户可以借助一个symlink攻击，访问任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-2389
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-2389
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-2389 (2)
Mailing List Discussions for CVE-2008-2389 (1)
-
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html vendor-advisory x_refsource_SUSE
Same Patch Batch · n/a · 2008-06-06 · 20 CVEs total
| CVE-2008-2569 | Joomla Easybook 组件 index.php gbid参数 SQL注入漏洞 | |
| CVE-2008-2575 | Jcoppens Cbrpager 存档文件文件名外壳元字符任意指令执行漏洞 | |
| CVE-2008-2574 | flashblog admin/Editor/imgupload.php 未限制文件上传漏洞 | |
| CVE-2008-2545 | Skype file:// URI处理器 输入验证漏洞 | |
| CVE-2008-2388 | Opensuse opensuse-updater off-by-one错误漏洞 | |
| CVE-2008-1805 | Skype file:// URI处理器 输入验证漏洞 | |
| CVE-2008-2573 | freeSSHd SFTP命令栈溢出漏洞 | |
| CVE-2008-2572 | Flashblog php/leer_comentarios.php SQL注入漏洞 | |
| CVE-2008-2571 | LimeSurvey "修改配额"操作跨站请求伪造漏洞 | |
| CVE-2008-2570 | LimeSurvey 多个未明安全漏洞 | |
| CVE-2008-2560 | 427BB showpost.php SQL注入漏洞 | |
| CVE-2008-2568 | Joomla!/Mambo Simple Shop 组件 index.php SQL注入漏洞 | |
| CVE-2008-2567 | Fenriru Sleipnir/Portable Sleipnir/Grani 未明跨站脚本攻击漏洞 | |
| CVE-2008-2566 | php-address_book 多个跨站脚本攻击漏洞 | |
| CVE-2008-2565 | php-address_book 多个SQL注入漏洞 | |
| CVE-2008-2564 | Joomla!/Mambo JotLoader 组件index.php cid参数SQL注入漏洞 | |
| CVE-2008-2563 | SamTodo 多个跨站脚本攻击漏洞 | |
| CVE-2008-2562 | Power Phlogger edCss.php SQL注入漏洞 | |
| CVE-2008-2561 | 427BB 多个跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2008-2389
No comments yet