DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
References
Link | Resource |
---|---|
http://secunia.com/advisories/18227 | Vendor Advisory |
http://secunia.com/advisories/18228 | Patch Vendor Advisory |
http://www.debian.org/security/2005/dsa-928 | Patch Vendor Advisory |
http://www.osvdb.org/21934 | |
http://www.osvdb.org/21935 | |
http://www.securityfocus.com/bid/16065 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/23859 |
Configurations
History
No history.
Information
Published : 2005-12-27 23:03
Updated : 2024-02-28 10:42
NVD link : CVE-2005-3341
Mitre link : CVE-2005-3341
CVE.ORG link : CVE-2005-3341
JSON object : View
Products Affected
dhis_tools
- dns_package
CWE