CVE-2008-5155 mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files...
HighCVSS 9.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files via a symlink attack on the (3) /tmp/sms.log temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smsclient | = 2.0.8z | No fix listed |