Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ce_ceterm | Swlink | * | 2.3.2 (including) |
| Ce_ceterm | Swlink | 2.4 (including) | 2.4 (including) |
| Ce_ceterm | Swlink | 2.5 (including) | 2.5 (including) |
| Ce_ceterm | Swlink | 2.5.1 (including) | 2.5.1 (including) |
| Ce_ceterm | Swlink | 2.5.2 (including) | 2.5.2 (including) |
| Ce_ceterm | Swlink | 2.5.3 (including) | 2.5.3 (including) |
| Ce_ceterm | Swlink | 2.5.4 (including) | 2.5.4 (including) |