Description
The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.
References
- apache-checkforensic-symlink(18993) vdb-entry
- 13925 third-party-advisory
- [debian-apache] 20050119 Bug#290974: marked as done (apache: Temporary usage bugs that can be used in symlink attacks) mailing-list
- USN-65-1 vendor-advisory