The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
References
Configurations
Information
Published : 2012-08-26 14:55
Updated : 2017-08-28 18:31
NVD link : CVE-2012-2103
Mitre link : CVE-2012-2103
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
munin-monitoring
- munin