Unscored CVE-2008-5136 EUVD-2008-5115GHSA-wpw2-359h-43fc

tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file.

Published Nov 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file.

References

32406 vdb-entry
[debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list