CVE-2008-5366

CVE-2008-5366 affects the postinst script of the Debian/PPP package (ppp 2.4.4rel). A local attacker can exploit a symlink vulnerability to overwrite arbitrary files via temporary files in /tmp (/tmp/probe-finished or /tmp/ppp-errors). Impact is described as local, with potential data corruption ...

CVE-2008-5366

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2 /tmp/ppp-errors temporary file...