Description
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.
References
- 1008702 vdb-entry
- antivir-tmpfile-insecure(14214) vdb-entry
- 10620 third-party-advisory
- 3496 vdb-entry
- 20040113 symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) mailing-list