← Database

CVE-2008-5155

CRITICAL CVSS: 9.3 Published: 2008-11-18 Modified: 2026-06-16

Description

mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files via a symlink attack on the (3) /tmp/sms.log temporary file.

Affected Platforms

Smsclient Smsclient

Weakness Type

CWE-59

References