CVE-2008-1078 expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: t...
HighCVSS 7.2
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo linux | All versions | No fix listed |
| rpath linux | All versions | No fix listed |
References
- bugs.gentoo.org exploit
- 29144 third-party-advisory vendor-advisory
- 29187 third-party-advisory vendor-advisory
- 29694 third-party-advisory vendor-advisory
- 33400 third-party-advisory vendor-advisory
- wiki.rpath.com
- GLSA-200804-09 vendor-advisory
- 20080228 rPSA-2008-0088-1 am-utils mailing-list
- 28044 vdb-entry
- issues.rpath.com
- FEDORA-2008-10755 vendor-advisory