CVE-2008-6398

CVE-2008-6398 affects SNG 1.0.2 and involves a local file overwrite via a symlink attack on temporary files (/tmp/recompiled$$.png, /tmp/decompiled$$.sng, /tmp/canonicalized$$.sng). The root cause is improper handling of symlinks that allows local users to overwrite arbitrary files. The fixed/mit...