← Database

CVE-2008-4995

MEDIUM CVSS: 6.9 Published: 2008-11-07 Modified: 2026-06-16

Description

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default.

Affected Platforms

Jose M.Vidal Bk2Site

Weakness Type

CWE-59

References