cve/2008/CVE-2008-1570.md

### [CVE-2008-1570](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1570)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs.  NOTE: this is due to an incomplete fix for CVE-2008-1569.

### POC

#### Reference
- https://bugs.gentoo.org/show_bug.cgi?id=214403

#### Github
No PoCs found on GitHub currently.