Arbitrary file deletion

2009-01-2802:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file.

CPENameOperatorVersion
winetrickseq20081127

CPE	Name	Operator	Version
	winetricks	eq	20081127

References

lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

osvdb.org/51619

www.securityfocus.com/bid/33474

code.google.com/p/winezeug/source/detail?r=253

exchange.xforce.ibmcloud.com/vulnerabilities/48320