[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2008-0525":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":41,"references":45,"score":59,"epss_score":60,"epss_percentile":61,"is_kev":18,"cisa_kev_date_added":62,"cisa_kev_due_date":62,"cisa_ssvc":63,"attack_mappings":69,"exploits":119},140573,"CVE-2008-0525","EUVD-2008-0535","PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux\u002FUnix\u002FMac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the \u002Ftmp\u002Fpatchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the \u002Ftmp\u002Fplshutdown file used by the rebootTask script.","2008-01-31T20:00:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",4.6,"LOCAL","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","LOW",false,[20],"CWE-59",[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"cpe:2.3:a:lumension_security:patchlink_update:6.4:*:unix:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:linux:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:unix:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.3:*:mac:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.2:*:linux:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:linux:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:mac:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:linux:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.3:*:linux:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.2:*:mac:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.3:*:unix:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:unix:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:unix:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.2:*:unix:*:*:*:*:*","cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.4:*:mac:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.4:*:linux:*:*:*:*:*","cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.3:*:mac:*:*:*:*:*","cpe:2.3:a:lumension_security:patchlink_update:6.2:*:mac:*:*:*:*:*",[42,43,44],"Unix Unix","Novell Zenworks Patch Management Update Agent","Lumension_Security Patchlink Update",[46,47,48,49,50,51,52,53,54,55,56,57,58],"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F28657","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F28665","http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3599","http:\u002F\u002Fsupport.lumension.com\u002Fscripts\u002Frightnow.cfg\u002Fphp.exe\u002Fenduser\u002Fstd_adp.php?p_faqid=527","http:\u002F\u002Fsupport.lumension.com\u002Fscripts\u002Frightnow.cfg\u002Fphp.exe\u002Fenduser\u002Fstd_adp.php?p_faqid=528","http:\u002F\u002Fsupport.lumension.com\u002Fscripts\u002Frightnow.cfg\u002Fphp.exe\u002Fenduser\u002Fstd_adp.php?p_faqid=530","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F487103\u002F100\u002F0\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F27458","http:\u002F\u002Fwww.securitytracker.com\u002Fid?1019272","http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F0426","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F39956","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F39958","https:\u002F\u002Fsecure-support.novell.com\u002FKanisaPlatform\u002FPublishing\u002F18\u002F3908994_f.SAL_Public.html",0.23,0.00502,0.42122,null,{"timestamp":62,"automatable":64,"tech_impact":65,"exploitation":66,"cisa_decision":67,"cisa_remediation_timeline":68},"no","partial","none",{},"FSU",[70,76,85,91,99,105,113],{"name":71,"source":72,"tactics":73,"technique_id":75},"Exploitation for Privilege Escalation","attack_vector",[74],"privilege-escalation","T1068",{"name":77,"source":78,"cwe_ids":79,"tactics":80,"capec_ids":82,"technique_id":84},"HTML Smuggling","capec",[20],[81],"stealth",[83],"CAPEC-35","T1027.006",{"name":86,"source":78,"cwe_ids":87,"tactics":88,"capec_ids":89,"technique_id":90},"Embedded Payloads",[20],[81],[83],"T1027.009",{"name":92,"source":78,"cwe_ids":93,"tactics":94,"capec_ids":96,"technique_id":98},"Shortcut Modification",[20],[95,74],"persistence",[97],"CAPEC-132","T1547.009",{"name":100,"source":78,"cwe_ids":101,"tactics":102,"capec_ids":103,"technique_id":104},"Resource Forking",[20],[81],[83],"T1564.009",{"name":106,"source":78,"cwe_ids":107,"tactics":108,"capec_ids":110,"technique_id":112},"Executable Installer File Permissions Weakness",[20],[109,81],"execution",[111],"CAPEC-17","T1574.005",{"name":114,"source":78,"cwe_ids":115,"tactics":116,"capec_ids":117,"technique_id":118},"Services File Permissions Weakness",[20],[109,81],[111],"T1574.010",[]]