CVE-2008-4998

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file

published November 7, 2008

CVSS
—
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Published
2008-11-07T19:00Z
EPSS history
Timeline
  • 07 NOV 19:00Z
    postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file
    cvelistv5