CVE-2008-5703 gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples...
MediumCVSS 6.2
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gpsdrive | <= 2.10 | No fix listed |
| gpsdrive | = 1.32 | No fix listed |
| gpsdrive | = 1.33 | No fix listed |
| gpsdrive | = 2.09 | No fix listed |
References
- bugs.debian.org
- [oss-security] 20081216 CVE id request: gpsdrive mailing-list
- 31694 third-party-advisory
- 33825 third-party-advisory
- sourceforge.net
- 32887 vdb-entry
- FEDORA-2009-1366 vendor-advisory