Description
The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=803358 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079075.html ↗
- http://www.openwall.com/lists/oss-security/2012/03/16/21 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:030 ↗