Linux tmpwatch –fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Linux |
Redhat |
6.2 (including) |
6.2 (including) |
Linux |
Redhat |
7.0 (including) |
7.0 (including) |
References