Unscored CVE-2008-5147 EUVD-2008-5126GHSA-vggf-rh6p-w6xj

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt…

Published Nov 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file.

References

docvert-testpipetopyodconverter-symlink(46713) vdb-entry
[debian-devel] 20080813 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
32418 vdb-entry
http://uvw.ru/report.sid.txt