CVE-2008-0525 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-0525
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0525

Description: PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39956 http://xforce.iss.net/xforce/xfdb/39958 ST 1019272 SREASON http://securityreason.com/securityalert/3599 SAID Secunia Advisory: SA28665 Secunia Advisory: SA28657 CONFIRM http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528 http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/487103/100/0/threaded BID 27458

Return to the previous page.