CVE-2008-0806 wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.
LowCVSS 3.6
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paul pelzl wyrd | = 1.4.3b_3 | No fix listed |
| debian/wyrd(Debian:12) | < 1.4.3b-4 | 1.4.3b-4 |
| debian/wyrd(Debian:13) | < 1.4.3b-4 | 1.4.3b-4 |
| debian/wyrd(Debian:14) | < 1.4.3b-4 | 1.4.3b-4 |
References
- bugs.debian.org exploit
- 29009 third-party-advisory vendor-advisory
- 29113 third-party-advisory
- 27848 vdb-entry
- bugzilla.redhat.com
- FEDORA-2008-1963 vendor-advisory
- FEDORA-2008-1986 vendor-advisory
- Debian Security Tracker CVE-2008-0806 vendor-advisory
- bugs.debian.org issue-tracking