CVE-2016-10538
published 2018-05-31CVE-2016-10538: The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any…
PriorityP413low3.5CVSS 3.0
AVNACLPRLUIRSUCNILAN
EPSS
0.99%
58.6th percentile
The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cli | cli | >= 0 < 1.0.0 | 1.0.0 |
| cli_project | cli | < 1.0.0 | 1.0.0 |
| debian | debian_linux | — | — |
| hackerone | cli_node_module | — | — |
CVSS provenance
nvdv3.03.5LOWCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
nvdv2.04.9MEDIUMAV:N/AC:M/Au:S/C:N/I:P/A:P
osv3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Arbitrary File Write in cli
ghsa·2019-02-18
CVE-2016-10538 [LOW] CWE-22 Arbitrary File Write in cli
Arbitrary File Write in cli
Affected versions of `cli` use predictable temporary file names. If an attacker can create a symbolic link at the location of one of these temporarly file names, the attacker can arbitrarily write to any file that the user which owns the `cli` process has permission to write to.
## Proof of Concept
By creating Symbolic Links at the following locations, the target of the link can be written to.
```
lock_file = '/tmp/' + cli.app + '.pid',
log_file = '/tmp/' + cli.app + '.log';
```
## Recommendation
Update to version 1.0.0 or later.
OSV
Arbitrary File Write in cli
osv·2019-02-18
CVE-2016-10538 [LOW] Arbitrary File Write in cli
Arbitrary File Write in cli
Affected versions of `cli` use predictable temporary file names. If an attacker can create a symbolic link at the location of one of these temporarly file names, the attacker can arbitrarily write to any file that the user which owns the `cli` process has permission to write to.
## Proof of Concept
By creating Symbolic Links at the following locations, the target of the link can be written to.
```
lock_file = '/tmp/' + cli.app + '.pid',
log_file = '/tmp/' + cli.app + '.log';
```
## Recommendation
Update to version 1.0.0 or later.
OSV
CVE-2016-10538: The package `node-cli` before 1
osv·2018-05-31·CVSS 3.5
CVE-2016-10538 [LOW] CVE-2016-10538: The package `node-cli` before 1
The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-05-31
Published