Vulnerability in Pvpgn

CVE-2008-5370

pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.

Affected products

  • Pvpgn — versions 1.8.1
  • N/a — versions n/a

Weakness classification (CWE)

References