getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### temporary files.
Max CVSS
6.9
EPSS Score
0.04%
Published
2008-11-06
Updated
2009-09-15
1 vulnerabilities found