CVE-2008-5148

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5148

CVE-2008-5148 affects geda-gnetlist; the sch2eaglepos.sh script creates a temporary file insecurely in /tmp, enabling local symlink attacks to overwrite arbitrary files. Affected package: gEDA/gNetlist, specifically around version 1.4.0. Impact: local privilege/file overwrite risk. Mitigation: up...