Vulnerabilities > Duncan Webb

DATE CVE VULNERABILITY TITLE RISK
2008-11-05 CVE-2008-4955 Link Following vulnerability in Duncan Webb Freevo 1.8.1
freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files.
local
high complexity
duncan-webb CWE-59
6.2