Description

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.

Remediation

References

CVE-2008-3929

Related Vulnerabilities

MySQL CVE-2012-5060 Vulnerability (CVE-2012-5060)

Django Other Vulnerability (CVE-2022-41323)

WordPress CVE-2006-4028 Vulnerability (CVE-2006-4028)

Java Unspesificed Vulnerability (CVE-2019-2818)

WordPress Plugin Booster for WooCommerce PHP Object Injection (3.0.1)

Severity

High

Classification

CVE-2008-3929 CWE-59

Tags

Missing Update Known Vulnerabilities