CVE-2009-1299

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files…

published March 18, 2010

CVSS
—
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.8th percentile
Published
2010-03-18T17:12Z
EPSS history
Timeline
  • 18 MAR 17:12Z
    The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files…
    cvelistv5