PT-2017-6885
CVE-2015-5701
·
تاريخ النشر
2017-08-25
·
تاريخ التحديث
2017-09-12
الوصف من
CVSS 2.0
5.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:C/A:N
Name of the Vulnerable Software and Affected Versions
mktexlsr versions as packaged in texlive before revision 36626 and after revision 36855
Description
The issue allows local users to write to arbitrary files via a symlink attack. This problem exists due to the reversion of a previous fix.
Recommendations
For versions as packaged in texlive before revision 36626 and after revision 36855, update to a version that includes the fix for this issue to prevent local users from writing to arbitrary files via a symlink attack.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾