Skip to content

CVE-2008-4948 fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.

MediumCVSS 6.9 EPSS 0.39%
Published
Updated
Exploit status
No public exploit known

Description

fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.

Affected products

ProductAffected versionsFixed in
nostatic digitaldj = 0.7.5 No fix listed

References