The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2013/01/22/8 | Mailing List Third Party Advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490 | Third Party Advisory |
http://www.openwall.com/lists/oss-security/2013/01/23/5 | Mailing List Third Party Advisory |
Configurations
Information
Published : 2020-01-28 07:15
Updated : 2020-02-07 09:54
NVD link : CVE-2012-6114
Mitre link : CVE-2012-6114
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
git-extras_project
- git-extras