CVE-2008-0525

CVE-2008-0525 affects PatchLink Update client for Unix (used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094–6.4102 and related products). The root cause is local symlink abuse in scripts that use temporary files: /tmp/patchlink.tmp (logtrimmer) can be truncated, an...