Description
pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack.
References
- pdfjam-pdf90-pdfjoin-pdfnup-symlink(47519) vdb-entry
- 33278 third-party-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=459031
- FEDORA-2009-2655 vendor-advisory
- FEDORA-2009-2651 vendor-advisory
- [oss-security] 20081219 CVE request - pdfjam mailing-list
- 34312 third-party-advisory
- 32931 vdb-entry