CVE-2008-4974

rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.xml and 2 /tmp/.backup temporary files...

CVE-2008-4974

CVE-2008-4974 affects rrdedit in netmrg 0.20. The issue allows a local attacker to overwrite arbitrary files via a symlink attack on temporary files under /tmp (*/.xml and */.backup). Root cause is a local-file write vulnerability tied to symlink handling in rrdedit, enabling manipulation of file...