CVE-2008-3931

Description

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected Platforms

Weakness Type

CWE-59

References

• http://bugs.debian.org/496418
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363
• http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core
• http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra
• http://secunia.com/advisories/31647
• http://secunia.com/advisories/31996