CVE-2010-2053

Published: Jun 7, 2010Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file.

Affected (6)

Products: Emesene: Emesene

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Emesene Emesene	Up to 1.6.1
Emesene Emesene	Version 1.0.1
Emesene Emesene	Version 1.0
Emesene Emesene	Version 1.5.1
Emesene Emesene	Version 1.5
Emesene Emesene	Version 1.6

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (24)

http://forum.emesene.org/index.php?topic=3441.0

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042683.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042699.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042725.html

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=127514641525366&w=2

Source: secalert@redhat.com

http://osvdb.org/65018

Source: secalert@redhat.com

http://secunia.com/advisories/39945

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/40115

Source: secalert@redhat.com

http://www.emesene.org/

Source: secalert@redhat.com

http://www.securityfocus.com/bid/40455

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1423

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/59045

Source: secalert@redhat.com

http://forum.emesene.org/index.php?topic=3441.0

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042683.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042699.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042725.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=127514641525366&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/65018

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39945

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/40115

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.emesene.org/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/40455

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1423

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/59045

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.