Description
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.
References
- netscape-install-tmpfile-symlink(7042) vdb-entry
- 20010827 Dangerous temp file creation during installation of Netscape 6. mailing-list
- 20010827 Dangerous temp file creation during installation of Netscape 6. mailing-list
- 3243 vdb-entry