ISOMAN

CVE

CVE-2018-6198

w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.

Severity
MEDIUM
CVSS
4.7
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
  2. http://www.securityfocus.com/bid/102855
  3. https://bugs.debian.org/888097
  4. https://github.com/tats/w3m/commit/18dcbadf2771cdb0c18509b14e4e73505b242753
  5. https://salsa.debian.org/debian/w3m/commit/18dcbadf2771cdb0c18509b14e4e73505b242753
  6. https://usn.ubuntu.com/3555-1/
  7. https://usn.ubuntu.com/3555-2/
  8. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
  9. http://www.securityfocus.com/bid/102855
  10. https://bugs.debian.org/888097
  11. https://github.com/tats/w3m/commit/18dcbadf2771cdb0c18509b14e4e73505b242753
  12. https://salsa.debian.org/debian/w3m/commit/18dcbadf2771cdb0c18509b14e4e73505b242753
  13. https://usn.ubuntu.com/3555-1/
  14. https://usn.ubuntu.com/3555-2/