CVE-2008-5149

Description

fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.

Affected products

• aucko / libncbi66.1.20080302 – 6.1.20080302

References

• MAILING_LISThttp://lists.debian.org/debian-devel/2008/08/msg00347.html
• MISChttp://www.securityfocus.com/bid/32401
• MISChttp://uvw.ru/report.sid.txt