CVE-2008-3524 rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var...
MediumCVSS 4.7
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2) /var/run.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat fedora | = 9 | No fix listed |
| redhat initscripts | = 8.76.3 | No fix listed |
References
- 32037 third-party-advisory vendor-advisory
- 32710 third-party-advisory
- wiki.rpath.com
- 31385 vdb-entry
- bugzilla.redhat.com
- bugzilla.redhat.com
- initscripts-rcsysinit-symlink(45402) vdb-entry
- issues.rpath.com
- FEDORA-2008-7667 vendor-advisory