Debian symbolic links vulnerability
Published:		11.04.2011
Source:		BUGTRAQ
SecurityVulns ID:		11571
Type:		local
Level:		5/10
Description:		/etc/cron.d/php5 cron job allows to delete arbitrary files via symlinks.

CVE:

CVE-2011-0441 (The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.)

Original document

MANDRIVA, [ MDVSA-2011:069 ] php (11.04.2011)

Discuss:

Read or add your comments to this news (0 comments)