PT-2007-1085 · Gentoo+1 · Gentoo Linux+1

Publicado

2007-03-18

·

Atualizado

2017-07-29

·

CVE-2007-1500

CVSS v2.0

4.3

Média

VetorAV:L/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Linux Security Auditing Tool (LSAT) versions prior to 0.9.5 Gentoo Linux lsat package versions prior to 0.9.5
Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally by an authenticated attacker.
Recommendations: For LSAT versions prior to 0.9.5, update to version 0.9.5 or later to resolve the issue. For Gentoo Linux lsat package versions prior to 0.9.5, update to version 0.9.5 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-09559
CVE-2007-1500

Produtos afetados

Gentoo Linux
Lsat