CVEvulnerability
CVE-2008-4832
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-59
Description
rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time.
Affected configurations
• rpath initscripts 8.12-8.21
• rpath initscripts 8.56.15-0.1
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://secunia.com/advisories/32710 secunia.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318 wiki.rpath.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46700 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-2857 issues.rpath.com
- http://secunia.com/advisories/32710 secunia.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318 wiki.rpath.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46700 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-2857 issues.rpath.com