Description
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
References
- 20051022 Insecure Temporary Files in BMC/Control-M Agent mailing-list
- 1015096 vdb-entry
- 17294 third-party-advisory
- 15167 vdb-entry