Vulnerability in Github Hub

CVE-2014-0177

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.

Affected products

Github Hub
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

secalert@redhat.com (URL Repurposed, x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)