Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

systemd: arbitrary file creation

Package(s): systemd CVE #(s): CVE-2012-0871

Created: February 29, 2012 Updated: March 12, 2012

Description: The systemd-logind process creates files under /run/user in an insecure manner, allowing a local attacker to create symbolic links in arbitrary locations.

Alerts:

SUSE	SUSE-SA:2012:001	2012-02-29
Fedora	FEDORA-2012-2557	2012-03-11

(Log in to post comments)