CVE-2008-4997

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4997

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

Design/Logic Flaw

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4997

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4997

The CVE-2008-4997 entry affects datafreedom-perl 0.1.7 (dfxml-invoice). A local user can overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. The issue is repeatedly described across multiple sources (Red Hat, Ubuntu, Debian). The vendor disputes the vulnerability, st...

CVE-2008-4997

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4997: Improper Link Resolution Before File Access

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

PT-2008-6167 · Unknown · Datafreedom-Perl

Name of the Vulnerable Software and Affected Versions: datafreedom-perl version 0.1.7 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. The vendor disputes this, stating that the vector is solely an example used in the...