CVE-2008-4948

CVE-2008-4948 affects fest.pl in digitaldj 0.7.5. A local user can overwrite arbitrary files through a symlink attack on the /tmp/ddj_fest.tmp file. The vulnerability arises from improper handling of symlinks in a temporary file, enabling local escalation that can impact confidentiality, integrit...