Secunia
Login
|
|
CVE Reference: CVE-2008-5153 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-5153 |
|
|
Description: spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/46708 SAID Secunia Advisory: SA33955 MLIST http://lists.debian.org/debian-devel/2008/08/msg00347.html MISC http://uvw.ru/report.sid.txt DEBIAN http://www.debian.org/security/2009/dsa-1724 BID 32402 |
|
| Return to the previous page. |
