CVEvulnerability

CVE-2008-5703

6.2 MEDIUM Published 2008-12-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-59

Description

gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.

Affected configurations

• gpsdrive gpsdrive (<= 2.10) • gpsdrive gpsdrive 1.32 • gpsdrive gpsdrive 1.33 • gpsdrive gpsdrive 2.09

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References