CVE-2008-4476: Medium severity sympa vulnerability
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4476?
CVE-2008-4476 is considered a moderate severity vulnerability due to its potential to allow file overwriting via symlink attacks.
How do I fix CVE-2008-4476?
To fix CVE-2008-4476, ensure you upgrade to a version of Sympa later than 5.3.4 that addresses this vulnerability.
Who is affected by CVE-2008-4476?
Users running Sympa version 5.3.4 are affected by CVE-2008-4476 due to the symlink vulnerability in sympa.pl.
What is the attack vector for CVE-2008-4476?
The attack vector for CVE-2008-4476 involves local users exploiting symlink attacks on temporary files.
Is CVE-2008-4476 still exploitable?
CVE-2008-4476 can still be exploitable if the vulnerable version is in use, emphasizing the importance of upgrades.