SUSE CVE-2010-1693

openibd in OpenFabrics Enterprise Distribution OFED 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ibsetnodedesc.sh temporary file...

CVE-2010-1693

OpenFabrics Enterprise Distribution (OFED) 1.5.2 vulnerable component: openibd. The flaw enables local users to overwrite arbitrary files via a symlink attack on the temporary file /tmp/ib_set_node_desc.sh. Root cause is a symlink/TOCTOU style issue in the code path handling node descriptor setup...