Description
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
Unscored
CVE-2008-4998
EUVD-2008-4977GHSA-c2m7-2r7v-phq7
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the ve…
Published Nov 7, 2008 · Updated Sep 17, 2024 · Assigned by mitre