1
Candidate: CVE-2008-4955
4
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4955
6
freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files
7
via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3)
8
/tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files. NOTE: this issue
9
is only a vulnerability when a verbose debug mode is activated by modifying
13
mdeslaur> can't be exploited, ignore
20
upstream_freevo: ignored
24
intrepid_freevo: ignored
25
jaunty_freevo: ignored
26
karmic_freevo: ignored