CVE-2008-4948

fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddjfest.tmp temporary file...

CVE-2008-4948

CVE-2008-4948 affects fest.pl in digitaldj 0.7.5. A local user can overwrite arbitrary files through a symlink attack on the /tmp/ddj_fest.tmp file. The vulnerability arises from improper handling of symlinks in a temporary file, enabling local escalation that can impact confidentiality, integrit...