Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on (1) files within /tmp/MathLink/ or (2) /tmp/fonts$$.conf.
References
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=full-disclosure&m=127380255201760&w=2 - | |
References | () http://secunia.com/advisories/39805 - Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/511298/100/0/threaded - |
Information
Published : 2010-05-24 19:30
Updated : 2024-11-21 01:15
NVD link : CVE-2010-2027
Mitre link : CVE-2010-2027
CVE.ORG link : CVE-2010-2027
JSON object : View
Products Affected
linux
- linux_kernel
wolfram_research
- mathematica
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')