GNU coreutils symbolic links vulnerability
Published:		26.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10556
Type:		local
Level:		4/10
Description:		Symbolic links vulnerability on temporary files creation in dist-check.mk

Affected:		GNU : coreutils 5.2
CVE:		CVE-2009-4135 (The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.)

Original document

MANDRIVA, [ MDVSA-2010:024 ] coreutils (26.01.2010)

Discuss:

Read or add your comments to this news (0 comments)