Linux tmpwatch –fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux | Redhat | 6.2 (including) | 6.2 (including) |
Linux | Redhat | 7.0 (including) | 7.0 (including) |