Description
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
References
- 20000829 MDKSA-2000:041 - xpdf update mailing-list
- 20000913 Conectiva Linux Security Announcement - xpdf mailing-list
- 1624 vdb-entry
- CSSA-2000-031.0 vendor-advisory
- RHSA-2000:060 vendor-advisory