low3.3Public exploit code
CVE-2009-4454
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VideoCache 1.9.2 - 'vccleaner' Local Privilege Escalation2009-12-16 · local · linux
Impact
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saini | Videocache | Version 1.9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html
- http://secunia.com/advisories/37733
- http://www.securityfocus.com/archive/1/508507/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54916
- http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html
- http://secunia.com/advisories/37733
- http://www.securityfocus.com/archive/1/508507/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54916