Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2009-04-01 10:30
Updated : 2017-09-29 01:34
NVD link : CVE-2009-1207
Mitre link : CVE-2009-1207
CVE.ORG link : CVE-2009-1207
JSON object : View
Products Affected
sun
- solaris
- opensolaris
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')