Description
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.
References
- http://www.zataz.net/adviso/sms-06272005.txt
- 16038 third-party-advisory
Published Jul 19, 2005 · Updated Sep 17, 2024 · Assigned by mitre
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.