Description
The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
References
- DSA-279 vendor-advisory
- 7293 vdb-entry
- metrics-tmpfile-symlink(11734) vdb-entry