Description
The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.
References
- 26200 third-party-advisory
- 26208 third-party-advisory
- 38573 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=184071
- GLSA-200707-08 vendor-advisory
- 25052 vdb-entry
- nvclock-setdefaultspeeds-symlink(35584) vdb-entry