gsambad Samba configuration tool symboc links vulnerability
Published:		02.07.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7880
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:		GSAMBAD : gsambad 0.1
CVE:		CVE-2007-2838 (The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file.)

Original document

DEBIAN, [Full-disclosure] [SECURITY] [DSA 1327-1] New gsambad packages fix unsafe temporary files (02.07.2007)

Discuss:

Read or add your comments to this news (0 comments)