Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

emesene: symlink attack

Package(s):

emesene

CVE #(s):

CVE-2010-2053

Created:

June 11, 2010

Updated:

June 16, 2010

Description:

From the CVE entry:

emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file.

Alerts:

Fedora	FEDORA-2010-9696	2010-06-08
Fedora	FEDORA-2010-9679	2010-06-08
Fedora	FEDORA-2010-9692	2010-06-08

(Log in to post comments)