VULNERABILITY INTELLIGENCE

CVE-2008-4951

CVSS score6.9 NONE
EPSS probability0.39%
CISA KEVNot currently listed
Published2008-11-05
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts.

Weakness classification

  • nvd@nist.gov: CWE-59

Primary references