medium6.9
CVE-2008-5146
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.
Impact
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Erl Wustl | Ctn | Version 3.0.6 |