The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gert doering mgetty 1.1.19 |
||
gert doering mgetty 1.1.21 |
||
gert doering mgetty 1.1.20 |