Arbitrary file deletion

2008-12-0823:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file.

CPENameOperatorVersion
sdm-terminaleq0.4.98

CPE	Name	Operator	Version
	sdm-terminal	eq	0.4.98

References

lists.debian.org/debian-devel/2008/08/msg00283.html