Test ID:	1.3.6.1.4.1.25623.1.0.100299
Category:	Web application abuses
Title:	Sympa 'sympa.pl' Insecure Temporary File Creation Vulnerability
Summary:	Sympa creates temporary files in an insecure manner.
Description:	Summary: Sympa creates temporary files in an insecure manner. Vulnerability Impact: An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible. Affected Software/OS: Sympa 5.4.3 is vulnerable, other versions may also be affected. Solution: Updates are available. Please see the references for more information. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4476 BugTraq ID: 30727 http://www.securityfocus.com/bid/30727 http://uvw.ru/report.lenny.txt http://lists.debian.org/debian-devel/2008/08/msg00312.html http://www.openwall.com/lists/oss-security/2008/10/30/2 http://secunia.com/advisories/31458 XForce ISS Database: sympa-sympa-symlink(44499) https://exchange.xforce.ibmcloud.com/vulnerabilities/44499
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.