Description
emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file.
References
- FEDORA-2010-9692 vendor-advisory
- FEDORA-2010-9679 vendor-advisory
- 39945 third-party-advisory
- [oss-security] 20100529 Fwd: emesene preditable temporary filename mailing-list
- 40115 third-party-advisory
- emesene-emsnpic-symlink(59045) vdb-entry
- 40455 vdb-entry
- ADV-2010-1423 vdb-entry
- FEDORA-2010-9696 vendor-advisory
- 65018 vdb-entry
- http://forum.emesene.org/index.php?topic=3441.0
- http://www.emesene.org/