CVE-2008-0806
wyrd 1.4.3b - Arbitrary File Overwrite via Symlink Attack on Temporary File
Title source: llmDescription
wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.
References (7)
Core 7
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29113
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29009
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27848
Exploit x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00825.html
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00841.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=433719
Scores
EPSS
0.0044
EPSS Percentile
35.2%
Details
CWE
CWE-59
Status
published
Products (1)
paul_pelzl/wyrd
1.4.3b_3
Published
Feb 19, 2008
Tracked Since
Feb 18, 2026