The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
References
Configurations
Information
Published : 2005-09-21 13:03
Updated : 2018-10-19 08:34
NVD link : CVE-2005-3011
Mitre link : CVE-2005-3011
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
gnu
- texinfo