Description

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.

Remediation

References

CVE-2008-3929

Related Vulnerabilities

Magento Improper Access Control Vulnerability (CVE-2021-21020)

Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651)

MySQL CVE-2017-10296 Vulnerability (CVE-2017-10296)

ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)

WordPress Plugin WP Subscribe Cross-Site Scripting (1.0.2)

Severity

High

Classification

CVE-2008-3929 CWE-59

Tags

Missing Update Known Vulnerabilities