Description
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.
References
- 10339 third-party-advisory
- hp-shar-tmpfile-symlink(13882) vdb-entry
- O-032 third-party-advisory government-resource
- VU#509454 third-party-advisory
- oval:org.mitre.oval:def:5788 vdb-entry signature
- HPSBUX0312-304 vendor-advisory
- 9141 vdb-entry