← Database

CVE-2008-4979

MEDIUM CVSS: 6.9 Published: 2008-11-06 Modified: 2026-06-16

Description

getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### temporary files.

Affected Platforms

Shrubbery Rancid

Weakness Type

CWE-59

References