|
|
CVE Reference: CVE-2005-1915 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-1915 |
|
|
Description: The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames. |
|
|
CVE Status: Candidate |
|
|
References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html SAID Secunia Advisory: SA15899 MISC http://www.zataz.net/adviso/log4sh-06092005.txt FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=94069 BID 14140 |
|
| Return to the previous page. |
