CVE-2008-5380

gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a…

published December 8, 2008

CVSS
—
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.1th percentile
Published
2008-12-08T23:00Z
EPSS history
Timeline
  • 08 DEC 23:00Z
    gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a…
    cvelistv5