Description
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log.
References
- 1009661 vdb-entry
- 20040404 Texutil symlink vulnerability. mailing-list
- texutil-symlink-attack(15728) vdb-entry
- 10042 vdb-entry
- 20040404 Texutil symlink vulnerability. mailing-list