CVE-2008-4943 bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) cre...
MediumCVSS 6.9
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iglues bulmages-servers | = 0.11.1 | No fix listed |