DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Dns_package | Dhis_tools | * | 5.0 (including) |
Dhis-tools-dns | Ubuntu | dapper | * |
Dhis-tools-dns | Ubuntu | devel | * |
Dhis-tools-dns | Ubuntu | edgy | * |
Dhis-tools-dns | Ubuntu | feisty | * |