CVE-2008-0883
Summary
| CVE | CVE-2008-0883 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2008-03-06 00:44:00 UTC |
|---|
| Updated | 2017-08-08 01:29:00 UTC |
|---|
| Description | acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| SUSE Update for Multiple Packages - Secunia Advisories - Vulnerability Information - Secunia.com |
SECUNIA |
secunia.com |
|
| Adobe Acrobat Reader: Insecure temporary file creation — Gentoo Linux Documentation |
GENTOO |
www.gentoo.org |
|
| Sun Solaris Adobe Reader Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH |
VUPEN |
www.vupen.com |
|
| [security-announce] SUSE Security Summary Report SUSE-SR:2008:005 |
SUSE |
lists.opensuse.org |
|
| Adobe - Privilege escalation issue in Adobe Reader 8.1.2 for Unix |
CONFIRM |
www.adobe.com |
|
| Adobe Acrobat Reader 'acroread' Insecure Temporary File Creation Vulnerability |
BID |
www.securityfocus.com |
|
| IBM X-Force Exchange |
XF |
exchange.xforce.ibmcloud.com |
|
| Gentoo update for acroread - Advisories - Secunia |
SECUNIA |
secunia.com |
|
| Support |
REDHAT |
www.redhat.com |
|
| Webmail - OVH |
VUPEN |
www.vupen.com |
|
| Security update for acroread |
CONFIRM |
support.novell.com |
Patch |
| 240106 |
SUNALERT |
sunsolve.sun.com |
|
| Adobe Reader for Linux Insecure Temporary Files - Advisories - Secunia |
SECUNIA |
secunia.com |
Vendor Advisory |
| SecurityTracker.com Archives - Adobe Acrobat Temporary File Race Condition in 'acroread' Wrapper Script Lets Local Users Gain Elevated Privileges |
SECTRACK |
www.securitytracker.com |
|
| Red Hat update for acroread - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|
| Red Hat | 2008-03-06 | Mark J Cox | Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-0883 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. |
There are currently no legacy QID mappings associated with this CVE.
