Description
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
References
- gnorpm-temp-symlink(5317) vdb-entry
- 1761 vdb-entry
- RHSA-2000:072 vendor-advisory
- 20001011 Immunix OS Security Update for gnorpm package mailing-list
- 20001002 GnoRPM local /tmp vulnerability mailing-list
- MDKSA-2000:055 vendor-advisory
- 20001003 Conectiva Linux Security Announcement - gnorpm mailing-list