Description
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.
References
- openofficeorg-tmpfile-symlink(10346) vdb-entry
- 5950 vdb-entry
- 20021011 OpenOffice 1.0.1 Race condition during installation. mailing-list