Description
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.
References
- 10644 vdb-entry
- GLSA-200407-01 vendor-advisory
- esearch-eupdatedb-symlink(16584) vdb-entry