CVE-2009-0035: Medium severity alsa (advanced linux sound architecture) vulnerability
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
Other sources
alsa-utils-1.0.19 and later allows local users to overwrite arbitrary files via a symlink attack via the 1), /usr/bin/alsa-info and 2, /usr/bin/alsa-info.sh scripts.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0035?
CVE-2009-0035 is considered a medium severity vulnerability due to its ability to allow local users to overwrite arbitrary files.
How do I fix CVE-2009-0035?
To mitigate CVE-2009-0035, ensure you limit user access to the vulnerable scripts and consider upgrading to a patched version of alsa-utils.
What systems are affected by CVE-2009-0035?
CVE-2009-0035 affects alsa-utils version 1.0.19 and later, specifically targeting systems using ALSA on Linux.
Can CVE-2009-0035 be exploited remotely?
No, CVE-2009-0035 requires local access to the system for exploitation through a symlink attack.
What is a symlink attack in the context of CVE-2009-0035?
A symlink attack in CVE-2009-0035 involves tricking a program into writing data to arbitrary files through symbolic links.