Description
initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files.
References
- 3367 vdb-entry
- linux-setserial-initscript-symlink(7177) vdb-entry
- RHSA-2001:110 vendor-advisory