CVE-2002-2382

The CVE-2002-2382 issue affects CVSup 1.2: a vulnerability in cvsupd.sh that allows a local attacker to overwrite arbitrary files and gain privileges through a symlink attack on /var/tmp/cvsupd.out. Root cause is a symlink-based path manipulation enabling file overwrite and privilege escalation. ...