Description
The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.
References
- 20050704 log4sh insecure temporary file creation mailing-list
- http://www.zataz.net/adviso/log4sh-06092005.txt
- http://bugs.gentoo.org/show_bug.cgi?id=94069
- 14140 vdb-entry
- ADV-2005-0957 vdb-entry
- 20050705 log4sh insecure temporary file creation mailing-list
- 15899 third-party-advisory