CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.

Link	Resource
http://www.securityfocus.com/bid/30928
http://sourceforge.net/project/shownotes.php?group_id=147849&release_id=623154	Patch
http://secunia.com/advisories/31617	Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381
https://bugs.gentoo.org/show_bug.cgi?id=235770
http://www.openwall.com/lists/oss-security/2008/10/30/2
http://dev.gentoo.org/~rbu/security/debiantemp/plait
https://exchange.xforce.ibmcloud.com/vulnerabilities/44786

Configuration 1

cpe:2.3:a:stephenjungels:plait:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.54:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.5:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.55:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.99:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.55.2:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.3:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.53:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.55.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.0:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:*:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.50:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:1.4:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.52:*:*:*:*:*:*:* cpe:2.3:a:stephenjungels:plait:0.51:*:*:*:*:*:*:*

---

Published : 2008-09-15 05:12

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4085

Mitre link : CVE-2008-4085

No products.

CWE-59