CVE-2008-5138

Description

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.

Affected products

• bkleineidam / libpam_mount0.43 – 0.43

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/32780
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/46724
• MAILING_LISThttp://lists.debian.org/debian-devel/2008/08/msg00285.html