Secunia
Login
|
|
CVE Reference: CVE-2009-4411 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2009-4411 |
|
|
Description: The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/55004 SUSE http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html SAID Secunia Advisory: SA37907 Secunia Advisory: SA38420 OSVDB 61302 MLIST http://www.openwall.com/lists/oss-security/2009/12/23/2 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2009:345 CONFIRM http://oss.sgi.com/bugzilla/show_bug.cgi?id=790 http://git.savannah.gnu.org/cgit/acl.git/commit/?id=63451a0 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499076 BID 37455 |
|
| Return to the previous page. |
