CVE-2008-6397

rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Score

CVSS 2.0 4.4 Medium

Status

Modified - cve@mitre.org

Published

2009-03-04

Last modified

2024-08-07

Weaknesses

CWE-59

Affected products

• Sgml2x (Alcovebook)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368
• http://lists.debian.org/debian-devel/2008/08/msg00312.html
• http://www.securityfocus.com/bid/30963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44879