Description
configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken#####.pike temporary file.
Metrics
CVSS 2.0 7.2/10
AV:L/AC:L/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Sep 2, 2008
- Last modified
- Jun 16, 2026
- NVD status
- Modified