Описание
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 1.001.dfsg1-2 |
| feisty | DNE | |
| gutsy | DNE | |
| hardy | DNE | |
| intrepid | ignored | end of life, was needed |
| jaunty | not-affected | 1.001.dfsg1-2 |
| karmic | not-affected | 1.001.dfsg1-2 |
| upstream | released | 1.001.dfsg1-2 |
Показывать по
Ссылки на источники
4.6 Medium
CVSS2
Связанные уязвимости
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.
The save function in br/prefmanager.d in projectl 1.001 creates a proj ...
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.
4.6 Medium
CVSS2