The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf...
6.3CVSS6.7AI score0.00424EPSS
SaveExploits1References2
Prion•added 2011/11/04 9:55 p.m.•14 views
Code injection
The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf...