CVE-2005-4534

The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Date published : 2005-12-27

http://www.securityfocus.com/bid/16061

http://www.securityfocus.com/archive/1/420353/100/0/threaded