← Database

CVE-2008-5380

MEDIUM CVSS: 6.9 Published: 2008-12-08 Modified: 2026-06-16

Description

gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959.

Affected Platforms

Gpsdrive Gpsdrive

Weakness Type

CWE-59

References