Vulnerabilities (CVE)

Filtered by vendor Iglues Subscribe
Filtered by product Bulmages-servers
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4943 1 Iglues 1 Bulmages-servers 2024-02-28 6.9 MEDIUM N/A
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.