CVE-2008-4475 ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU ibackup | = 2.27 | No fix listed |
References
- bugs.debian.org
- bugs.debian.org
- dev.gentoo.org
- [debian-devel] 20080811 Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire mailing-list
- bugs.gentoo.org
- ibackup-unspecified-symlink(45852) vdb-entry