Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

merkaartor: symbolic link vulnerability

Package(s): merkaartor CVE #(s): CVE-2009-4193

Created: December 16, 2009 Updated: December 16, 2009

Description: Merkaartor suffers from a symbolic link vulnerability on /tmp/merkaartor.log, allowing a local attacker to append data to arbitrary files.

Alerts:

Fedora	FEDORA-2009-13196	2009-12-16
Fedora	FEDORA-2009-13195	2009-12-16

(Log in to post comments)