vulnwire
4.6med

CVE-2008-01671 exploit

The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then w…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
1
Exploit-DB

The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.

Exploit prediction (EPSS)

0.73% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

Exploits and detections

  • EDB-5173 phpQLAdmin 2.2.7 - Multiple Remote File Inclusions · webapps · 2008-02-22

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

  • securityfocus.com /bid/29215 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/30286 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.debian.org /pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/1537/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/30088 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2008/dsa-1577 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/42456 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.