CVEvulnerability

CVE-2008-5380

6.9 MEDIUM Published 2008-12-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-59

Description

gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959.

Affected configurations

• gpsdrive gpsdrive 2.09

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References