sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2008-05-23 15:32
Updated : 2017-09-29 01:29
NVD link : CVE-2007-5495
Mitre link : CVE-2007-5495
CVE.ORG link : CVE-2007-5495
JSON object : View
Products Affected
selinux
- setroubleshoot
redhat
- enterprise_linux
- enterprise_linux_desktop
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')