CVE-2008-0310

{"id": "CVE-2008-0310", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-04-07T17:44:00.000", "references": [{"url": "http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt", "source": "cve@mitre.org"}, {"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29657", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.sco.com/support/update/download/release.php?rid=324", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019787", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41759", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5355", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via \"..\" sequences in an unspecified environment variable, probably PKGINST."}, {"lang": "es", "value": "Vulnerabilidad de Salto de Directorio en pkgadd de SCO UnixWare 7.1.4 y versiones anteriores a p534589 permite a usuarios locales crear o agregar archivos de su elecci\u00f3n mediante secuencias \u201c..\u201d en una variable de entorno sin especificar, probablemente PKGINST."}], "lastModified": "2017-09-29T01:30:12.927", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "059218D3-A3AD-4A10-9AA4-FBB689321D90"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}