Vulnerability Details CVE-2009-4454
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.3%
CVSS Severity
CVSS v2 Score 3.3
References
- http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html
- http://secunia.com/advisories/37733
- http://www.securityfocus.com/archive/1/508507/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54916
- http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html
- http://secunia.com/advisories/37733
- http://www.securityfocus.com/archive/1/508507/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54916
Products affected by CVE-2009-4454
-
cpe:2.3:a:saini:videocache:1.9.2