ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• [oss-security] 20120614 CVE-2012-3345: symlink attack in ioquake3 >= r1773, < r2253 mailing-list
• GLSA-201706-23 vendor-advisory