CVE-2008-4988 pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file.
MediumCVSS 6.9
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lars bahner xcal | = 4.1 | No fix listed |
| debian/xcal(Debian:11) | < 4.1-19 | 4.1-19 |