CVE-2008-4953

firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...

CVE-2008-4953

FireHOL 1.256 is affected by a local vulnerability allowing unprivileged users to overwrite temporary files via a symlink attack on /tmp/.firehol-tmp-#####-- and /tmp/firehol.conf. The vendor disputes the issue, claiming exploitation requires creating a large number of symlinks. Connected sources...