CVE-2008-5370

pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2008-12-08

Last modified

2024-09-17

Weaknesses

CWE-59

Affected products

• Pvpgn (Pvpgn)

References

• http://lists.debian.org/debian-devel/2008/08/msg00283.html