CVE-2010-1438

Web Application Finger Printer WAFP 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which 1 allows local users to cause a denial of service application outage by creating a file with a pathname that the product expects is available for its own internal use, 2 allows...

CVE-2010-1438

CVE-2010-1438 affects Web Application Finger Printer (WAFP) 0.01-26c3, which uses fixed /tmp pathnames for temporary files and directories. The root cause is improper handling of /tmp paths, enabling local users to: (1) cause a denial of service by pre-creating a file with an expected pathname, (...