Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

bacula: symlink attack

Package(s):

bacula

CVE #(s):

CVE-2008-5373

Created:

July 30, 2012

Updated:

August 27, 2012

Description:

From the CVE entry:

mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### temporary file, probably a related issue to CVE-2005-2995.

Alerts:

Fedora	FEDORA-2012-10929	2012-07-29
Fedora	FEDORA-2012-11717	2012-08-27
Mageia	MGASA-2012-0321	2012-11-06

(Log in to post comments)