Description
The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
References
- http://www.nedit.org/archives/develop/2001-Feb/0391.html
- 20010428 More nedit problems ? (was Re: PROGENY-SA-2001-10...) mailing-list
- RHSA-2001:061 vendor-advisory
- MDKSA-2001:042 vendor-advisory
- 2667 vdb-entry
- DSA-053 vendor-advisory
- SuSE-SA:2001:14 vendor-advisory