Description
A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.
References
- 48895 vdb-entry
- http://bugs.debian.org/433996
- xsabre-unspecified-symlink(45715) vdb-entry
- [oss-security] 20081001 CVE id request: sabre mailing-list
- 31512 vdb-entry
- xsabre-xrunsabre-symlink(45609) vdb-entry