Unscored CVE-2008-5704 EUVD-2008-5675GHSA-xq2x-gx2h-74r3

src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on t…

Published Dec 22, 2008 · Updated Sep 16, 2024 · Assigned by mitre

Description

src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380.

References

[oss-security] 20081216 CVE id request: gpsdrive mailing-list
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508597