Description
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
Affected products
- gnu / ksymoops2.4.5 – 2.4.5
- gnu / ksymoops2.4.8 – 2.4.8
- gnu / ksymoops2.4.9 – 2.4.9
- mandrakesoft / mandrake_linux9.1 – 9.1
- mandrakesoft / mandrake_linux9.1 – 9.1
- mandrakesoft / mandrake_linux9.2 – 9.2
- mandrakesoft / mandrake_linux9.2 – 9.2
- mandrakesoft / mandrake_linux10.0 – 10.0
- mandrakesoft / mandrake_linux10.0 – 10.0
- mandrakesoft / mandrake_linux_corporate_server2.1 – 2.1
- mandrakesoft / mandrake_linux_corporate_server2.1 – 2.1