Description
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
References
- 13108 third-party-advisory
- 11616 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=69147
- portage-dispatchconf-symlink(17986) vdb-entry
- GLSA-200411-13 vendor-advisory