← Database

CVE-2008-4440

HIGH CVSS: 7.2 Published: 2008-10-03 Modified: 2026-06-16

Description

The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and (2) /tmp/feta.avail.$USER temporary files.

Affected Platforms

Debian Feta

Weakness Type

CWE-59

References