CVE-2008-0167 The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intend...
MediumCVSS 4.6
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gforge | = 4.5.14 | No fix listed |
References
- 30088 third-party-advisory vendor-advisory
- 30286 third-party-advisory vendor-advisory
- security.debian.org
- DSA-1577 patch vendor-advisory
- 29215 vdb-entry
- ADV-2008-1537 vdb-entry
- gforge-unspecified-symlink(42456) vdb-entry