debian/crip vulnerabilities

Latest debian/crip CVEs

Newest publication first

1. CVE-2008-5376 editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.

   Published 2008-12-08

   Medium·CVSS 6.9 EPSS 0.34%

   editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.

2. CVE-2005-0393 The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

   Published 2005-07-01

   High·CVSS 7.2 EPSS 0.38%

   The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

3. DSA-733-1 crip - insecure temporary files

   Published 2005-06-30

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.