Vulnerability in Marco D\'itri Ppp

CVE-2008-5366

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.

EPSS: 0.004 (31.1th percentile) — read the EPSS interpretation.

Affected products

Marco_d\'itri Ppp — versions 2.4.4
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (vdb-entry, x_refsource_BID)