sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file.
References
Configurations
Information
Published : 2008-12-08 15:30
Updated : 2008-12-08 21:00
NVD link : CVE-2008-5372
Mitre link : CVE-2008-5372
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
jonas_smedegaard
- sdm-terminal