CVE-2008-4943

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.36%

Published

Nov 5, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.

Weaknesses (CWE)

CWE-59

Affected Products (1)

iglues · bulmages-serversvulnerable

References (8)

http://bugs.debian.org/496382

http://dev.gentoo.org/~rbu/security/debiantemp/bulmages-servers

Exploit

http://www.openwall.com/lists/oss-security/2008/10/30/2

https://bugs.gentoo.org/show_bug.cgi?id=235770

http://bugs.debian.org/496382

http://dev.gentoo.org/~rbu/security/debiantemp/bulmages-servers

Exploit

http://www.openwall.com/lists/oss-security/2008/10/30/2

https://bugs.gentoo.org/show_bug.cgi?id=235770

KEV Catalog EPSS Scores Vendors All CVEs