CVE-2008-0167 Race condition in n/a
Attackers can exploit a race condition in GForge configuration file updates to bypass access restrictions or modify data.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-0167?
CVE-2008-0167 is a medium-severity vulnerability in n/a, published on 18 May 2008. It can be exploited over the network, with no action from the victim.
Official description
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.
Weakness: CWE-59
Which versions are affected by CVE-2008-0167?
It affects 1 product.
Products include Gforge Gforge.
How do I fix CVE-2008-0167?
Apply the vendor's patch.
Is CVE-2008-0167 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-0167 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DSA-1577-1, GHSA-w8p2-vhrj-74p5.