iproute: insecure temp files
| Package(s): | iproute |
CVE #(s): | CVE-2012-1088
|
| Created: | March 26, 2012 |
Updated: | March 28, 2012 |
| Description: |
From the Red Hat bugzilla:
Multiple (by checking for ATM technology support, checking for Xtables
extension support, checking for setns() system call support, and in
dhcp-client-script example script) insecure temporary file use cases were found
in iproute. A local attacker could use this flaw to conduct symbolic link
attacks (modify or remove files via specially-crafted link names). |
| Alerts: |
|
