Sabre · Sabre · CVE-2008-4407
Name of the Vulnerable Software and Affected Versions:
sabre (aka xsabre) version 0.2.4b
Description:
The issue allows local users to cause a denial of service, resulting in application unavailability. This occurs because the application relies on the ability to create a /tmp/sabre.log file, which can be exploited by creating a file that cannot be overwritten.
Recommendations:
For sabre (aka xsabre) version 0.2.4b, consider restricting access to the /tmp directory to prevent unauthorized creation of the sabre.log file as a temporary workaround.