Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Noweb |
Norman_ramsey |
* |
2.9 (including) |
References