[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2008-5139":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":23,"references":25,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":18,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":41,"exploits":91},141315,"CVE-2008-5139","EUVD-2008-5118","updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a \u002Ftmp\u002F#####.updatejail temporary file.","2008-11-18T16:00:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.9,"LOCAL","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","MEDIUM",false,[20],"CWE-59",[22],"cpe:2.3:a:javier_fernandez:jailer:0.4:*:*:*:*:*:*:*",[24],"Javier_Fernandez Jailer",[26,27,28,29,30],"http:\u002F\u002Flists.debian.org\u002Fdebian-devel\u002F2008\u002F08\u002Fmsg00285.html","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32943","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32959","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2008\u002Fdsa-1674","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F32413",0.35,0.00295,0.21026,null,{"timestamp":34,"automatable":36,"tech_impact":37,"exploitation":38,"cisa_decision":39,"cisa_remediation_timeline":40},"no","partial","none",{},"FSU",[42,48,57,63,71,77,85],{"name":43,"source":44,"tactics":45,"technique_id":47},"Exploitation for Privilege Escalation","attack_vector",[46],"privilege-escalation","T1068",{"name":49,"source":50,"cwe_ids":51,"tactics":52,"capec_ids":54,"technique_id":56},"HTML Smuggling","capec",[20],[53],"stealth",[55],"CAPEC-35","T1027.006",{"name":58,"source":50,"cwe_ids":59,"tactics":60,"capec_ids":61,"technique_id":62},"Embedded Payloads",[20],[53],[55],"T1027.009",{"name":64,"source":50,"cwe_ids":65,"tactics":66,"capec_ids":68,"technique_id":70},"Shortcut Modification",[20],[67,46],"persistence",[69],"CAPEC-132","T1547.009",{"name":72,"source":50,"cwe_ids":73,"tactics":74,"capec_ids":75,"technique_id":76},"Resource Forking",[20],[53],[55],"T1564.009",{"name":78,"source":50,"cwe_ids":79,"tactics":80,"capec_ids":82,"technique_id":84},"Executable Installer File Permissions Weakness",[20],[81,53],"execution",[83],"CAPEC-17","T1574.005",{"name":86,"source":50,"cwe_ids":87,"tactics":88,"capec_ids":89,"technique_id":90},"Services File Permissions Weakness",[20],[81,53],[83],"T1574.010",[]]