Description
Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://marc.info/?l=bugtraq&m=112958392512513&w=2 ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350 ↗
- http://www.zataz.net/adviso/flexbackup-09192005.txt ↗
- http://www.debian.org/security/2006/dsa-1216 ↗
- http://secunia.com/advisories/17209 ↗
- http://secunia.com/advisories/23008 ↗
- http://securitytracker.com/id?1015068 ↗