CVE-2008-6397 rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
MediumCVSS 4.4
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alcovebook sgml2x | = 1.0.0 | No fix listed |
| debian/sgml2x(Debian:11) | < 1.0.0-11.2 | 1.0.0-11.2 |
References
- bugs.debian.org
- [debian-devel] 20080812 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- 30963 vdb-entry
- sgml2x-rlatex-symlink(44879) vdb-entry
- security-tracker.debian.org vendor-advisory