PT-2011-2009
CVE-2011-0007
·
تاريخ النشر
2011-01-11
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:L/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
pimd versions 2.1.5 and earlier
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on certain files when specific signals are sent. This can occur with
pimd.dump when a USR1 signal is sent, or with pimd.cache when a USR2 signal is sent.Recommendations
For versions 2.1.5 and earlier, consider restricting access to the USR1 and USR2 signals to prevent exploitation. Additionally, as a temporary workaround, consider implementing file system permissions to limit the ability to overwrite arbitrary files.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾