NuytsTech Security

CVE-2006-5163

by ·

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.

Date published : 2006-10-03

http://www.securityfocus.com/bid/20300

http://www.securityfocus.com/archive/1/447501/100/0/threaded

Tags: