Description
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
References
- apmd-apmscript-symlink(8268) vdb-entry
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389
- 20011204 Symlink attack with apmd of RH 7.2 mailing-list
- 5493 vdb-entry