Unscored CVE-2009-0032 EUVD-2009-0044GHSA-27qc-c946-g657

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users t…

Published Jan 27, 2009 · Updated Aug 7, 2024 · Assigned by redhat

Description

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.

References

1021637 vdb-entry
MDVSA-2009:027 vendor-advisory
cups-pdflog-symlink(48210) vdb-entry
MDVSA-2009:029 vendor-advisory
MDVSA-2009:028 vendor-advisory
33418 vdb-entry