Lucene search
+L

1 matches found

RubySec
RubySec
added 2014/06/30 12:00 a.m.17 views

VladTheEnterprising Gem for Ruby /tmp/my.cnf.#{target_host} Symlink Multiple Impact

VladTheEnterprising Gem for Ruby contains a flaw as the program creates temporary files insecurely. It is possible for a local attacker to use a symlink attack against the /tmp/my.cnf.targethost file they can overwrite arbitrary files, gain access to the MySQL root password, or inject arbitrary...

5.5CVSS2.6AI score0.00431EPSS
SaveExploits0References1
Rows per page
Query Builder