GCVE - cpe:2.3:a:lumension_security:patchlink

Approved changes feed: RSS · Atom

cpe:2.3:a:lumension_security:patchlink_update:6.2:*:unix:*:*:*:*:*

part: a version: 6.2 update: *

Vendor	Lumension Security (`7aceb4cc-0a39-5aa1-968b-163f2b8b97f1`)
Product	Patchlink Update (`de9e2032-064b-5237-aeb8-4b6d73d164cd`)
Edition	unix
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0525`	vulnerable	2026-06-08 04:50:17.014966	Details available PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script. Published: 2008-01-31T19:30:00.000Z Updated: 2024-08-07T07:46:54.858Z Open on db.gcve.eu Reference links http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527 http://www.securityfocus.com/bid/27458 https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html http://www.vupen.com/english/advisories/2008/0426 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.