Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Nautilus | Eazel | 1.0.4 (including) | 1.0.4 (including) |
Red Hat Linux 7.2 | RedHat | * |