Description
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
References
- MDKSA-2000:015 vendor-advisory
- RHSA-2000:041 vendor-advisory
- linux-man-makewhatis-tmp(4900) vdb-entry
- 20000727 CONECTIVA LINUX SECURITY ANNOUNCEMENT - MAN mailing-list
- 1434 vdb-entry