CVE:CVE-2008-4978
CNNVD:CNNVD-200811-122
radiance 3R9+20080530版本允许本地用户借助一个对(a)/tmp/opt.fmt,(b)/tmp/out#####.fmt,(c)/tmp/tf#####.dat,(d)/tmp/gsf#####,(e) /tmp/sc#####.sh,(f)/tmp/il#####.pic,(g)/tmp/tl#####.pic,(h)/tmp/ds#####.pic,(i)/tmp/tfa#####和(j)/tmp/sed#####临时文件的symlink攻击，重写任意文件。这些临时文件与(1) optics2rad, (2) pdelta, (3) dayfact和(4) raddepend脚本。
solution:Upgrade radiance radiance to a higher version than 3:r9,and avoid the version 3:r9