CVE-2008-5379

2008-12-0823:00:00

mitre

www.cve.org

cve-2008-5379

symlink attack

temporary file

netdisco-mibs-install

netdisco-mibs-download

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

References

lists.debian.org/debian-devel/2008/08/msg00285.html