CVE-2016-7490: Improper Link Resolution Before File Access

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

PT-2016-7349

Name of the Vulnerable Software and Affected Versions Teradata Studio Express version 15.12.00.00 Description The issue arises from the insecure creation of files in the /tmp directory by the installation script studioexpressinstall. This could allow a malicious local user to create a symlink in...