CVEvulnerability

CVE-2008-4475

7.2 HIGH Published 2008-10-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2008-10-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-59

Description

ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected configurations

• gnu ibackup 2.27

Related

Weakness · CWE (1)

CWE-59 Improper Link Resolution Before File Access weakness

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496432 bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496464 bugs.debian.org
http://dev.gentoo.org/~rbu/security/debiantemp/ibackup dev.gentoo.org
http://lists.debian.org/debian-devel/2008/08/msg00271.html lists.debian.org
http://www.openwall.com/lists/oss-security/2008/10/30/2 www.openwall.com
https://bugs.gentoo.org/show_bug.cgi?id=235770 bugs.gentoo.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/45852 exchange.xforce.ibmcloud.com
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496432 bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496464 bugs.debian.org
http://dev.gentoo.org/~rbu/security/debiantemp/ibackup dev.gentoo.org
http://lists.debian.org/debian-devel/2008/08/msg00271.html lists.debian.org
http://www.openwall.com/lists/oss-security/2008/10/30/2 www.openwall.com
https://bugs.gentoo.org/show_bug.cgi?id=235770 bugs.gentoo.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/45852 exchange.xforce.ibmcloud.com