impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files.
References
Configurations
History
No history.
Information
Published : 2008-11-05 15:00
Updated : 2024-02-28 11:21
NVD link : CVE-2008-4960
Mitre link : CVE-2008-4960
CVE.ORG link : CVE-2008-4960
JSON object : View
Products Affected
dov_grobgeld
- impose\+
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')