Vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb
CVE-2009-0416
The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files.
EPSS: 0.002 (15.6th percentile) — read the EPSS interpretation.
Affected products
- Standards_based_linux_instrumentation Sblim-sfcb — versions 1.3.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2009-0416?
- CVE-2009-0416 is a vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb, classified under Improper Link Resolution Before File Access. Published 2009-02-03.
- Is CVE-2009-0416 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.