Unscored CVE-2008-4990 EUVD-2008-4969GHSA-pwrq-j4r3-977f

Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink at…

Published Feb 2, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.

References

20090130 CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities mailing-list
33724 third-party-advisory
33544 vdb-entry
[enomalism] 20081212 ECP 2.1.1 Released mailing-list