Description
tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://sourceforge.net/project/shownotes.php?release_id=380030&group_id=64960 ↗
- http://www.securityfocus.com/bid/16064 ↗
- http://www.debian.org/security/2005/dsa-927 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23858 ↗
- http://secunia.com/advisories/18083 ↗
- http://www.osvdb.org/21933 ↗
- http://secunia.com/advisories/18215 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:001 ↗
- http://securitytracker.com/id?1015421 ↗