fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.

Published Nov 5, 2008 · Updated Aug 7, 2024 · Assigned by mitre