uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-05-16T06:54:00

Updated: 2024-08-07T08:58:02.330Z

Reserved: 2008-05-16T00:00:00

Link: CVE-2008-2266

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-05-16T12:54:00.000

Modified: 2024-11-21T00:46:28.320

Link: CVE-2008-2266

cve-icon Redhat

No data.