CVE-2008-4990

Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2009-02-02

Last modified

2024-08-07

Weaknesses

CWE-59

Affected products

• Elastic Computing Platform (Enomaly)

References

• http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source
• http://secunia.com/advisories/33724
• http://www.securityfocus.com/archive/1/500573/100/0/threaded
• http://www.securityfocus.com/bid/33544