CVE-2008-4832

Properties

Published:
16.11.2008
Updated:
19.11.2008
Patch available:
Severity:
Medium
CVSS vector:
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Product:
rpath: initscripts
rpath: initscripts

Vulnerability description

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run.  NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time.

References:

CONFIRM: https://issues.rpath.com/browse/RPL-2857
CONFIRM: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318