Description
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
References
- ESA-20010711-01 vendor-advisory
- allcommerce-temp-symlink(6830) vdb-entry
- 3016 vdb-entry