CVE-2001-0116

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0116

The CVE concerns gpm 1.19.3 where a race condition allows a local user to exploit predictable /tmp filenames and symlink targets to overwrite/modify files the privileged gpm process uses. This is described in CERT/CC and Mandrake advisories, which note a temporary-file handling flaw; the impact i...