CVE-2008-4957

findflags in Kitware GCC-XML gccxml 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.cxx temporary file...

CVE-2008-4957

CVE-2008-4957 affects Kitware GCC-XML (gccxml) 0.9.0. The vulnerability arises from insecure temporary file handling in the find_flags routine, which creates/opens a file under /tmp/*.cxx in a way that allows a local attacker to exploit a symlink and overwrite arbitrary files. Impact: potential c...