Description
The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.
References
- 10833 third-party-advisory
- 4735 vdb-entry
- http://www.excluded.org/advisories/advisory10.txt
- 20040209 [local problems] eTrust Virus Protection 6.0 InoculateIT for linux mailing-list
- etrust-inoculateit-symlink(15102) vdb-entry
- 9616 vdb-entry
- 4855 vdb-entry
- 4856 vdb-entry