Description
Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.
References
- 20100222 Secunia Research: Bournal Insecure Temporary Files Security Issue mailing-list
- FEDORA-2010-3221 vendor-advisory
- FEDORA-2010-3168 vendor-advisory
- 38554 third-party-advisory
- http://secunia.com/secunia_research/2010-6/
- 38814 third-party-advisory
- FEDORA-2010-3301 vendor-advisory
- 38353 vdb-entry