LWN.net Logo

pcp: insecure temporary file use

Package(s):pcp CVE #(s):CVE-2012-5530
Created:November 23, 2012 Updated:November 28, 2012
Description:

From the Fedora advisory:

A security flaw was found in the way Performance Co-Pilot (PCP), a framework and services to support system-level performance monitoring and performance management, performed management of its temporary files used by various services from the suite. A local attacker could use this flaw to conduct symbolic link attacks (alter or remove different system files, accessible with the privileges of the user running the PCP suite, than it was originally intended).

Alerts:
Fedora FEDORA-2012-18654 2012-11-23
Fedora FEDORA-2012-18686 2012-11-23
SUSE SUSE-SU-2013:0190-1 2013-01-23

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds