CVE-2008-4967

linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.
Configurations

Configuration 1 (hide)

cpe:2.3:a:linuxtrade:linuxtrade:3.65:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-11-06 15:55

Updated : 2023-12-10 10:51


NVD link : CVE-2008-4967

Mitre link : CVE-2008-4967

CVE.ORG link : CVE-2008-4967


JSON object : View

Products Affected

linuxtrade

  • linuxtrade
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')