Description
Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on (1) files within /tmp/MathLink/ or (2) /tmp/fonts$$.conf.
References
- 39805 third-party-advisory
- 20100514 Mathematica on Linux /tmp/MathLink vulnerability mailing-list
- 20100514 Mathematica on Linux /tmp/MathLink vulnerability mailing-list