CVE-2008-5377

This exploit leverages a symlink attack on the CUPS pstopdf filter to overwrite /etc/ld.so.preload, enabling local privilege escalation by preloading a malicious shared library. It requires specific conditions such as CUPS executing filters as a privileged user and a printer using the pstopdf filter.