CVE-2008-4990

Description

Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.

Affected Platforms

Weakness Type

CWE-59

References

• http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source
• http://secunia.com/advisories/33724
• http://www.securityfocus.com/archive/1/500573/100/0/threaded
• http://www.securityfocus.com/bid/33544
• http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source
• http://secunia.com/advisories/33724