The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
Link | Tags |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.html | mailing list vendor advisory |
http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.html | mailing list patch vendor advisory |
http://www.securityfocus.com/bid/1622 | vdb entry patch vendor advisory |