Description
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
References
- 10516 vdb-entry
- ksymoops-symlink(16392) vdb-entry
- MDKSA-2004:060 vendor-advisory