← Database

CVE-2008-4959

MEDIUM CVSS: 6.9 Published: 2008-11-05 Modified: 2026-06-16

Description

geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files.

Affected Platforms

Gpsdrive Gpsdrive-Scripts

Weakness Type

CWE-59

References