← All advisories

Unrated severityNVD Advisory· Published Dec 8, 2008· Updated Jun 16, 2026

CVE-2008-5376

CVE-2008-5376

Description

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file.

Affected products

2

Crip/Crip2 versions
cpe:2.3:a:crip:crip:3.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:crip:crip:3.7:*:*:*:*:*:*:*
- (no CPE)range: =3.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.