Vulnerability in Oliver Gorwits Netdisco Mibs Installer

CVE-2008-5379

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts.

EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.

Affected products

Oliver_gorwits Netdisco_mibs_installer — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (mailing-list, x_refsource_MLIST)