CVE-2011-1031

The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:feh_project:feh:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.4:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.6:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.11:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.10.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.10:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.5:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.8:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.7:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.9:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:1.11.1:*:*:*:*:*:*:*
cpe:2.3:a:feh_project:feh:*:*:*:*:*:*:*:*

Information

Published : 2011-02-14 14:00

Updated : 2020-02-27 05:13


NVD link : CVE-2011-1031

Mitre link : CVE-2011-1031


JSON object : View

CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')

Advertisement

dedicated server usa

Products Affected

feh_project

  • feh