Computer Security
[EN] securityvulns.ru no-pyccku


gsambad Samba configuration tool symboc links vulnerability
Published:02.07.2007
Source:
SecurityVulns ID:7880
Type:local
Threat Level:
5/10
Description:Symbolic links problem on temporary files creation.
Affected:GSAMBAD : gsambad 0.1
CVE:CVE-2007-2838 (The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file.)
Original documentdocumentDEBIAN, [Full-disclosure] [SECURITY] [DSA 1327-1] New gsambad packages fix unsafe temporary files (02.07.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod