SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.
References
Link | Resource |
---|---|
http://www.zataz.net/adviso/sms-06272005.txt | |
http://secunia.com/advisories/16038 | Vendor Advisory |
Configurations
Information
Published : 2005-07-18 21:00
Updated : 2008-09-05 13:51
NVD link : CVE-2005-2311
Mitre link : CVE-2005-2311
JSON object : View
CWE
Products Affected
sms
- sms