Description
YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies.
References
- 20040405 SuSEs YaST Online Update - possible symlink attack mailing-list
- 11300 third-party-advisory
- suse-you-symlink(15731) vdb-entry
- 20040406 Re: SuSEs YaST Online Update - possible symlink attack mailing-list
- 1009668 vdb-entry
- 4985 vdb-entry
- 10047 vdb-entry