CVE		CVE-2008-3699
Status		Candidate
Description		The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.
Phase		Assigned (14.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3699
References		BID : 30662
		CONFIRM : http://amarok.kde.org/en/releases/1/4/10
		CONFIRM : http://websvn.kde.org/?view=rev&revision=846626
		FEDORA : FEDORA-2008-7719
		FEDORA : FEDORA-2008-7739
		GENTOO : GLSA-200809-08
		MANDRIVA : MDVSA-2008:172
		MISC : http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=4...
		SECUNIA : 31418
		SECUNIA : 31663
		SECUNIA : 31839
		SECUNIA : 32357
		SLACKWARE : SSA:2008-241-01
		UBUNTU : USN-657-1
		VUPEN : ADV-2008-2338
		XF : amarok-magnatunebrowser-symlink(44399)
SecurityVulns:		Amarok symbolic links vulnerability