fish prior to 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fishshell fish |
||
fedoraproject fedora 19 |