CVE-2008-5153

CVE-2008-5153 affects Moodle: local attackers could exploit a symlink-based race to overwrite arbitrary files via temporary files /tmp/spell-check-debug.log, /tmp/spell-check-before, or /tmp/spell-check-after. Initial description identifies Moodle 1.8.2 as vulnerable with a local symlink attack. ...

CVE-2008-5153: Improper Link Resolution Before File Access

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...