LWN.net Logo

open-iscsi: code execution

Package(s):open-iscsi CVE #(s):CVE-2009-1297
Created:October 21, 2011 Updated:April 10, 2013
Description:

From the Ubuntu advisory:

Colin Watson discovered that iscsi_discovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to to overwrite arbitrary files with root privileges.

Alerts:
Ubuntu USN-1235-1 2011-10-20
Mageia MGASA-2012-0241 2012-08-26
Mandriva MDVSA-2013:109 2013-04-10

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds