CVE-2008-3929

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.

Date published : 2008-09-04

http://www.securityfocus.com/bid/30875

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369