CVE-2008-4407
Published: 3 October 2008
XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service (application unavailability) by creating a /tmp/sabre.log file that cannot be overwritten.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
sabre Launchpad, Ubuntu, Debian |
dapper |
Released
(0.2.4b-21ubuntu0.1)
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Released
(0.2.4b-23ubuntu0.7.10.1)
|
|
| hardy |
Released
(0.2.4b-23ubuntu0.8.04.1)
|
|
| intrepid |
Not vulnerable
(0.2.4b-25)
|
|
| upstream |
Released
(0.2.4b-25)
|
|
|
Patches: debdiff: http://launchpad.net/bugs/283446 |
||