CVE-2008-5366
CVE-2008-5366
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.
EPSS 0.4%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ppp Debian:12
- Versions
- 2.4.9-1+1.1
- 2.5.0-1+1
- 2.5.0-1+2
- 2.5.1-1+1
- 2.5.1-1+1~exp1
- 2.5.2-1+1
- 2.5.2-1+1.1
- 2.5.2-1+1.2
- 2.5.2-1+1~exp1
- 2.5.2-1+2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ppp Debian:13
- Versions
- 2.5.2-1+1
- 2.5.2-1+1.1
- 2.5.2-1+1.2
- 2.5.2-1+2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ppp Debian:14
- Versions
- 2.5.2-1+1
- 2.5.2-1+1.1
- 2.5.2-1+1.2
- 2.5.2-1+2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published