Unscored CVE-2013-0265 EUVD-2013-0293GHSA-vw34-62j2-5mwm

The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files …

Published Feb 13, 2013 · Updated Sep 17, 2024 · Assigned by redhat

Description

The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.

References

[oss-security] 20130206 Re: CVE request: Insecure default log file path in xNBD mailing-list
90008 vdb-entry
[oss-security] 20130206 CVE request: Insecure default log file path in xNBD mailing-list