CVE-2008-5743 pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack.
MediumCVSS 6.9
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pdfjam | = _nil_ | No fix listed |
References
- 33278 third-party-advisory
- 34312 third-party-advisory
- [oss-security] 20081219 CVE request - pdfjam exploit mailing-list
- 32931 vdb-entry
- bugzilla.novell.com exploit
- pdfjam-pdf90-pdfjoin-pdfnup-symlink(47519) vdb-entry
- FEDORA-2009-2651 vendor-advisory
- FEDORA-2009-2655 vendor-advisory