CVE-2008-5138 passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.
MediumCVSS 6.9
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bkleineidam libpam mount | = 0.43 | No fix listed |
| debian/libpam-mount(Debian:12) | < 1.2+gitaa4791f-1 | 1.2+gitaa4791f-1 |
| debian/libpam-mount(Debian:13) | < 1.2+gitaa4791f-1 | 1.2+gitaa4791f-1 |
| debian/libpam-mount(Debian:14) | < 1.2+gitaa4791f-1 | 1.2+gitaa4791f-1 |
References
- [debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- SUSE-SR:2009:005 vendor-advisory
- 32780 third-party-advisory
- libpammount-passwdehd-symlink(46724) vdb-entry
- Debian Security Tracker CVE-2008-5138 vendor-advisory