CVE-2008-4990 Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.
MediumCVSS 6.9
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enomaly elastic computing platform | <= 2.1 | No fix listed |
References
- [enomalism] 20081212 ECP 2.1.1 Released mailing-list
- 33724 third-party-advisory
- 20090130 CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities mailing-list
- 33544 vdb-entry