netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• ADV-2007-0912 vdb-entry
• 24464 third-party-advisory
• 33975 vdb-entry
• 22925 vdb-entry
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413658