CVE

Id
35060  
CVE No.
CVE-2008-4943  
Status
Candidate  
Description
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments