OSVDB ID: 50637

Title: CUPS pstopdf /tmp/pstopdf.log Temporary File Symlink Arbitrary File Overwrite

Info

Disclosure

Aug 13, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Local Access Required
Attack Type: Input Manipulation, Race Condition
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-5377 (see also: NVD)
Secunia Advisory ID: 33530
Milw0rm: 7550
Exploit Database: 7550
Mail List Post: http://lists.debian.org/debian-devel/2008/08/msg00347.html
Other Advisory URL: http://uvw.ru/report.sid.txt
Vendor Specific News/Changelog Entry: https://lists.ubuntu.com/archives/ubuntu-security-announce/2009-January/000825.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/50637