CVE-2008-4476 sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred i...
MediumCVSS 6.9
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sympa | = 5.3.4 | No fix listed |
| debian/sympa(Debian:12) | < 5.3.4-5.1 | 5.3.4-5.1 |
| debian/sympa(Debian:13) | < 5.3.4-5.1 | 5.3.4-5.1 |
| debian/sympa(Debian:14) | < 5.3.4-5.1 | 5.3.4-5.1 |
References
- bugs.debian.org
- bugs.debian.org
- dev.gentoo.org
- [debian-devel] 20080812 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- 31458 third-party-advisory vendor-advisory
- uvw.ru
- [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire mailing-list
- 30727 vdb-entry
- bugs.gentoo.org
- sympa-sympa-symlink(44499) vdb-entry
- Debian Security Tracker CVE-2008-4476 vendor-advisory
- bugs.debian.org issue-tracking