CVE-2008-2389: Medium severity suse linux vulnerability
Published Jun 6, 2008
·Updated
opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.
Affected Software
1 affected component
openSUSE openSUSE=10.2
Event History
Jun 6, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2389?
CVE-2008-2389 is rated as a moderate vulnerability due to its ability to allow unauthorized access to arbitrary files through a symlink attack.
2
How do I fix CVE-2008-2389?
To mitigate CVE-2008-2389, users should upgrade to openSUSE versions later than 10.2 where the vulnerability has been addressed.
3
Who is affected by CVE-2008-2389?
CVE-2008-2389 affects local users of openSUSE 10.2, enabling them to exploit the vulnerability via symlink attacks.
4
What kind of attack is CVE-2008-2389 associated with?
CVE-2008-2389 is associated with a symlink attack that allows local users to access files they should not have permission to.
5
What component does CVE-2008-2389 involve?
CVE-2008-2389 involves the opensuse-updater component in openSUSE 10.2.