Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edeveloper | Magic | * | 8.30.5 (including) |