Secunia

Steve Kemp has reported a security issue in Xen, which can be exploited by malicious, local users to truncate arbitrary files.

The security issue is caused due to the "xenbaked" program truncating the file "/tmp/xenq-shm" in an insecure manner, which can be exploited via symlink attacks to truncate arbitrary files.

The security issue is reported in version 3.1. Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
Steve Kemp, Debian Security Audit project

Original Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447795

Deep Links
Links available in Customer Area