CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4960

CVE-2008-4960 affects the impose+ 0.2 package. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files: (1) /tmp/-tmp.ps and (2) /tmp/bboxx- . The connected sources consistently describe this local overwrite risk but do not provide detailed exploi...