Description
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.
References
- 6150 vdb-entry
- [freebsd-security] 20021109 Security issue in net/cvsup-mirror port mailing-list
- cvsup-cvsupd-out-symlink(10610) vdb-entry