medium6.9
CVE-2008-5376
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.
Impact
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crip | Crip | Version 3.7 |