Vendor
jtsylve
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.6
LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following
LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the outpu…