{"id":"CVE-2010-4173","aliases":["EUVD-2010-4148","GHSA-mjwg-g73c-x345","UBUNTU-CVE-2010-4173"],"status":"published","title":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp,...","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","severity":{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00292,"percentile":0.21871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-59"],"published":"2010-11-22T19:00:00Z","modified":"2026-06-16T23:24:17Z","products":[{"vendor":"openfabrics","product":"libsdp"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2010/11/16/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2010/11/16/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=647941","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4173"},{"url":"https://github.com/advisories/GHSA-mjwg-g73c-x345"},{"url":"https://ubuntu.com/security/CVE-2010-4173","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4173","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2010-4173","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","status":"published","published":"2010-11-22T19:00:00Z","modified":"2024-08-07T03:34:37.196Z","updated_at":"2026-11-02T14:33:28.50039Z"}],"euvd":[{"id":"EUVD-2010-4148","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","status":"published","published":"2010-11-22T19:00:00Z","modified":"2024-08-07T03:34:37Z","updated_at":"2026-11-03T01:39:31.566203Z"}],"ghsa":[{"id":"GHSA-mjwg-g73c-x345","title":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp,...","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","status":"published","published":"2022-05-17T05:45:54Z","modified":"2023-01-28T05:04:32Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:44:11.828892Z"}],"nvd":[{"id":"CVE-2010-4173","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","status":"published","published":"2010-11-22T20:00:03.98Z","modified":"2026-06-16T23:24:17.463Z","cvss":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"UBUNTU-CVE-2010-4173","description":"The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.","status":"withdrawn","published":"2010-11-22T20:00:00Z","modified":"2025-07-16T07:30:41.086495Z","updated_at":"2026-11-02T15:54:06.395274Z"}]}}
