Unscored CVE-2008-5369 EUVD-2008-5346GHSA-8wrq-c77w-9j2f

noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.

Published Dec 8, 2008 · Updated Sep 16, 2024 · Assigned by mitre

Description

noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.

References

[debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list