Skip to content
OpenAdvisories

Vendor

scottchiefbaker

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 2.0

    Arbitrary File Overwrite via Symlink Following in dool project

    Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing …