CVE-2008-5135

The CVE refers to os-prober 1.17, where a local user can exploit a symlink to overwrite files via /tmp/mounted-map or /tmp/raided-map. The core issue is a symlink/temporary file handling path in the insecure code path. Several connected sources (NVD, Red Hat, Debian/Ubuntu advisories, and Nessus ...

CVE-2008-5135: Improper Link Resolution Before File Access

os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...

PT-2008-6280 · Os-Prober +1 · Os-Prober +1

Name of the Vulnerable Software and Affected Versions: os-prober version 1.17 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/mounted-map or /tmp/raided-map temporary file. The vendor disputes this issue, stating that the insecure code path...