XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openlinux | Caldera | 1.2 (including) | 1.2 (including) |
| Debian_linux | Debian | 2.0 (including) | 2.0 (including) |
| Debian_linux | Debian | 2.0-r5 (including) | 2.0-r5 (including) |
| Debian_linux | Debian | 2.1 (including) | 2.1 (including) |
| Netbsd | Netbsd | 1.3.3 (including) | 1.3.3 (including) |
| Linux | Redhat | 5.1 (including) | 5.1 (including) |
| Suse_linux | Suse | 5.3 (including) | 5.3 (including) |