CVE-2008-5366

EPSS 0.02%
Published: 12/8/2008Modified: 4/28/2026

Description

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.

Affected packages (1)

References (1)