CVE-2008-1078 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1078
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1078

Description: expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

CVE Status: Candidate

References: SAID Secunia Advisory: SA29144 Secunia Advisory: SA29187 Secunia Advisory: SA29694 Secunia Advisory: SA33400 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200804-09.xml FEDORA CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088 http://bugs.gentoo.org/show_bug.cgi?id=210158 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488931/100/0/threaded BID 28044

Return to the previous page.