Description
The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack.
References
- 20050111 Mod_dosevasive symlink and race vulnerability mailing-list
- 13725 third-party-advisory
- 12181 vdb-entry
- moddosevasive-symlink(18765) vdb-entry
- http://security.lss.hr/index.php?page=details&ID=LSS-2005-01-01