The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Open_source_apple_file_share_protocol_suite | Netatalk | 1.5_pre6 (including) | 1.5_pre6 (including) |
| Open_source_apple_file_share_protocol_suite | Netatalk | 1.6.1 (including) | 1.6.1 (including) |
| Open_source_apple_file_share_protocol_suite | Netatalk | 1.6.4 (including) | 1.6.4 (including) |
| Netatalk | Ubuntu | dapper | * |
| Netatalk | Ubuntu | devel | * |
| Netatalk | Ubuntu | edgy | * |
| Netatalk | Ubuntu | feisty | * |
References
- http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml
- http://www.trustix.org/errata/2004/0050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583
- http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml
- http://www.trustix.org/errata/2004/0050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583