{ "schema_version": "1.4.0", "id": "GHSA-p2pv-rfm6-cxq7", "modified": "2022-05-01T23:36:26Z", "published": "2022-05-01T23:36:26Z", "aliases": [ "CVE-2008-1078" ], "details": "expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1078" }, { "type": "WEB", "url": "https://issues.rpath.com/browse/RPL-2255" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00273.html" }, { "type": "WEB", "url": "http://bugs.gentoo.org/show_bug.cgi?id=210158" }, { "type": "WEB", "url": "http://secunia.com/advisories/29144" }, { "type": "WEB", "url": "http://secunia.com/advisories/29187" }, { "type": "WEB", "url": "http://secunia.com/advisories/29694" }, { "type": "WEB", "url": "http://secunia.com/advisories/33400" }, { "type": "WEB", "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088" }, { "type": "WEB", "url": "http://www.gentoo.org/security/en/glsa/glsa-200804-09.xml" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/488931/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/28044" } ], "database_specific": { "cwe_ids": [ "CWE-59" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2008-02-29T02:44:00Z" } }