Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7v3-6rr8-2vmj

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.

EPSS

Процентиль: 66%
0.00523
Низкий

Связанные уязвимости

nvd
около 20 лет назад

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.

EPSS

Процентиль: 66%
0.00523
Низкий