Unscored CVE-2008-4995 EUVD-2008-4974GHSA-3cch-6jhj-6gg8

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. …

Published Nov 7, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default.

References

http://bugs.debian.org/496430
[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire mailing-list
https://bugs.gentoo.org/show_bug.cgi?id=235770
http://dev.gentoo.org/~rbu/security/debiantemp/bk2site
bk2site-redirect-symlink(46543) vdb-entry