xscreensaver symbolic links vulnerability updated since 05.07.2009
Published:		06.07.2009
Source:		FULL-DISCLOSURE
SecurityVulns ID:		10040
Type:		local
Level:		5/10
Description:		It's possible to obtain content of any file via ~/.xscreensaver symlink.

Affected:

XORG : xscreensaver 5.01

Original document		Kingcope Kingcope, Re: [Full-disclosure] Oops! About xscreensaver 5.01 (06.07.2009)
		Kingcope Kingcope, Oops! About xscreensaver 5.01 (06.07.2009)
		Kingcope Kingcope, xscreensaver local arbitrary file disclosure | symlink attack (05.07.2009)

Discuss:

Read or add your comments to this news (0 comments)