VladTheEnterprising allows local users to write to arbitrary files via a symlink attack

2022-05-1403:48:04

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to write to arbitrary files via a symlink attack on /tmp/my.cnf.#{target_host}.

CPENameOperatorVersion
vladtheenterprisingeq0.1.5
vladtheenterprisingeq0.1.7
vladtheenterprisingeq0.2
vladtheenterprisingeq0.1.4
vladtheenterprisingeq0.1.8
vladtheenterprisingeq0.1.6

Name	Operator	Version
vladtheenterprising	eq	0.1.5
vladtheenterprising	eq	0.1.7
vladtheenterprising	eq	0.2
vladtheenterprising	eq	0.1.4
vladtheenterprising	eq	0.1.8
vladtheenterprising	eq	0.1.6