PT-2008-6119 · Unknown · Cdrw-Taper
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
cdrw-taper version 0.4
Description
The issue might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw temporary directory.
Recommendations
For cdrw-taper version 0.4, consider restricting access to the temporary directory to prevent symlink attacks until a patch is available.
Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cdrw-Taper