CVE-2008-4440
Publication date 3 October 2008
Last updated 24 July 2024
Ubuntu priority
Description
The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and (2) /tmp/feta.avail.$USER temporary files.