CVE-2008-0167

The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.73% chance of exploitation in the next 30 days, 53rd percentile

Published

2008-05-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5173

Security advisories

• http://secunia.com/advisories/30088
• http://secunia.com/advisories/30286
• http://www.debian.org/security/2008/dsa-1577
• http://www.securityfocus.com/bid/29215

References

• CVE Record
• NVD entry