Design/Logic Flaw

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4985

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4985

CVE-2008-4985 affects Video Disk Recorder (vdr) 1.6.0 and its debug variant (vdr-dbg / vdr). The flaw allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file, indicating a local privilege/impact scenario. The root cause is a symlink/temporar...