CVE-2008-4974

CVE-2008-4974 affects rrdedit in netmrg 0.20. The issue allows a local attacker to overwrite arbitrary files via a symlink attack on temporary files under /tmp (*/.xml and */.backup). Root cause is a local-file write vulnerability tied to symlink handling in rrdedit, enabling manipulation of file...