Description
OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.
References
- 12902 vdb-entry
- 14693 third-party-advisory
- 20050325 RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit mailing-list