FreeBSD Ports: ampache

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3929

Ampache 3.4.1 is affected: the gather-messages.sh script allows local users to overwrite arbitrary files via a symlink attack on /tmp/filelist. This CVE-2008-3929 is confirmed by multiple feeds (NVD entry and Gentoo/OpenVAS/Nessus advisories). Impact is local, with complete confidentiality/integr...