OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/12902 | vdb entry patch |
http://secunia.com/advisories/14693 | third party advisory vendor advisory |
http://marc.info/?l=bugtraq&m=111176899423078&w=2 | mailing list |