Vendors / Cvsup Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Cvsup records in CISA KEV No Cvsup vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00311 · Published 2007-10-31 · No fix listed CWE-59
Priority LOW 22
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link a…
CVSS 2.0 MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00607 · Published 2005-05-27 · No fix listed
Priority LOW 21
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
CVSS 2.0 MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00321 · Published 2003-08-01 · No fix listed
Open these records in search → All records by CVSS severity
0 1 2 0 0
