VULNERABILITY INTELLIGENCE

CVE-2009-0032

CVSS score6.9 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2009-01-27
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references