medium6.9Public exploit code
CVE-2008-5706
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- verlihub 0.9.8d-RC2 - Remote Command Execution2008-11-21 · remote · linux · Verified
Impact
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verlihub-Project | Verlihub | Version 0.9.8d |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/506530
- http://openwall.com/lists/oss-security/2008/12/17/16
- http://securityreason.com/securityalert/4800
- http://www.securityfocus.com/bid/32889
- https://www.exploit-db.com/exploits/7183
- http://bugs.debian.org/506530
- http://openwall.com/lists/oss-security/2008/12/17/16
- http://securityreason.com/securityalert/4800
- http://www.securityfocus.com/bid/32889
- https://www.exploit-db.com/exploits/7183