漏洞信息详情

Worker Filemanager目录创建竞争条件漏洞

• CNNVD编号：CNNVD-200312-159
• 危害等级： 低危
  
• CVE编号： CVE-2003-1460
• 漏洞类型： 权限许可和访问控制
• 发布时间： 2003-12-31
• 威胁类型： 本地
• 更新时间： 2003-12-31
• 厂        商： ralf_hoffmann
• 漏洞来源： ralf_hoffmann

漏洞简介

Worker Filemanager 1.0到2.7版本复制数据时将目的目录权限设为全域可读和可执行，本地用户利用该漏洞可以获取敏感信息。

漏洞公告

This issue has been addressed in the current version of this software. Users are advised to upgrade as soon as possible. Ralf Hoffmann Worker filemanager 1.0

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.2

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.3

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.3.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.3.2

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 1.3.3

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.0

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.0.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.0.2

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.2

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.2.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.2.2

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.3

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.3.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.4

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.5

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.6

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.6.1

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

Ralf Hoffmann Worker filemanager 2.7

• Ralf Hoffmann worker-2.7.1.tar.bz2 http://www.boomerangsworld.de/worker/downloads/worker-2.7.1.tar.bz2

参考网址

来源: BID 名称: 7460 链接:http://www.securityfocus.com/bid/7460 来源: www.boomerangsworld.de 链接:http://www.boomerangsworld.de/worker/wchanges.php3?lang=en

受影响实体

• Ralf_hoffmann Worker_filemanager:2.7  
• Ralf_hoffmann Worker_filemanager:2.6.1  
• Ralf_hoffmann Worker_filemanager:2.6  
• Ralf_hoffmann Worker_filemanager:2.5  
• Ralf_hoffmann Worker_filemanager:2.4  

补丁

暂无