Description
avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory.
References
- 20060414 Avast Linux Home Edition (vulnerability on a temporary folder creation) mailing-list
- ADV-2006-1387 vdb-entry
- 712 third-party-advisory
- 17535 vdb-entry
- 19683 third-party-advisory
- 764 third-party-advisory