CVE-2009-1299 Common Vulnerabilities and Exposures

Upstream information

CVE-2009-1299 at MITRE

Description

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	6.9
Vector	AV:L/AC:M/Au:N/C:C/I:C/A:C
Access Vector	Local
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entry: 584938 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SR:2010:007, published Tue, 30 Mar 2010 10:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 07:15:51 2013
CVE page last modified: Fri Dec 8 16:32:11 2023