Description
The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat.
References
- 24526 third-party-advisory
- 23014 vdb-entry
- gentoo-lsat-symlink(33057) vdb-entry
- 34267 vdb-entry
- GLSA-200703-20 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=159542