Vulnerability in Chip Salzenberg Deliver

CVE-2010-0439

Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file.

EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.

Affected products

Chip_salzenberg Deliver — versions 2.1.14
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)