CVE-2008-0666

CVE-2008-0666 affects Website META Language (WML) 2.0.11. Local attackers can exploit insecure temporary files created by wml_contrib/wmg.cgi, wml_backend/p3_eperl/eperl_sys.c, and ipp-related paths (e.g., /tmp/pe.tmp.$$) via symlinks to overwrite or modify files. Impact is local. The vulnerabili...

CVE-2008-0665

CVE-2008-0665 affects Website META Language (WML) 2.0.11, where wml_backend/p1_ipp/ipp.src allows local users to overwrite arbitrary files via a symlink attack on ipp.$$.tmp. The issue is confirmed in multiple advisories (Debian DSA-1492-1/2, Gentoo GLSA-200803-23, Mandriva MDVSA-2008:076, Gentoo...