CVE-2008-1078

Description

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Other references

• http://bugs.gentoo.org/show_bug.cgi?id=210158
• https://www.cve.org/CVERecord?id=CVE-2008-1078