QwikSec

Security Database

CVE

CWE

Training

CVE-2008-5155

Published: Nov 18, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files via a symlink attack on the (3) /tmp/sms.log temporary file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[debian-devel] 20080813 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

mailing-list

x_refsource_MLIST

http://uvw.ru/report.sid.txt

x_refsource_MISC

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.