Description
The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.
References
- 28838 third-party-advisory
- SUSE-SR:2008:003 vendor-advisory