CVEvulnerability

CVE-2008-1570

6.9 MEDIUM Published 2008-03-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569.

Affected configurations

• policyd-weight policyd-weight 0.1.14 beta-14

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

Referenced by CWE · observed example (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References