Unscored CVE-2008-5148 EUVD-2008-5127GHSA-gf66-vwpq-h87p

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.

Published Nov 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.

References

32875 third-party-advisory
FEDORA-2008-9730 vendor-advisory
FEDORA-2008-9694 vendor-advisory
32806 third-party-advisory
[debian-devel] 20080813 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
http://uvw.ru/report.sid.txt