CVE-2008-4085 plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.
MediumCVSS 4.4
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stephenjungels plait | <= 1.5.2 | No fix listed |
| stephenjungels plait | = 0.50 | No fix listed |
| stephenjungels plait | = 0.51 | No fix listed |
| stephenjungels plait | = 0.52 | No fix listed |
| stephenjungels plait | = 0.53 | No fix listed |
| stephenjungels plait | = 0.54 | No fix listed |
| stephenjungels plait | = 0.55 | No fix listed |
| stephenjungels plait | = 0.55.1 | No fix listed |
| stephenjungels plait | = 0.55.2 | No fix listed |
| stephenjungels plait | = 0.99 | No fix listed |
| stephenjungels plait | = 1.0 | No fix listed |
| stephenjungels plait | = 1.1 | No fix listed |
| stephenjungels plait | = 1.1.1 | No fix listed |
| stephenjungels plait | = 1.2.1 | No fix listed |
| stephenjungels plait | = 1.3 | No fix listed |
| stephenjungels plait | = 1.4 | No fix listed |
| stephenjungels plait | = 1.4.1 | No fix listed |
| stephenjungels plait | = 1.4.2 | No fix listed |
| stephenjungels plait | = 1.5 | No fix listed |
| stephenjungels plait | = 1.5.1 | No fix listed |
| debian/plait(Debian:13) | < 1.5.2-2 | 1.5.2-2 |
| debian/plait(Debian:14) | < 1.5.2-2 | 1.5.2-2 |
References
- bugs.debian.org
- dev.gentoo.org
- 31617 third-party-advisory vendor-advisory
- sourceforge.net patch
- [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire mailing-list
- 30928 vdb-entry
- bugs.gentoo.org
- plait-file-symlink(44786) vdb-entry
- Debian Security Tracker CVE-2008-4085 vendor-advisory
- bugs.debian.org issue-tracking