CVE-2008-5156

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

Arbitrary file deletion

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

CVE-2008-5156

The CVE-2008-5156 entry concerns systemimager-server 3.6.3, specifically the si_mkbootserver component. A local attacker can exploit a symlink race to overwrite arbitrary files via temporary files in /tmp (either .inetd.conf or pxe.conf. .tmp). This results in a local, non-remote attack with impa...