CVE-2008-4832 | BDVDB-2026-33423 Detail

Description#

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12008-11-17Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.