Description
qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.
References
- 13108 third-party-advisory
- gentoolkit-symlink(17968) vdb-entry
- 11617 vdb-entry
- GLSA-200411-13 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=68846