PT-2008-6110 · Mgetty · Mgetty
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
mgetty version 1.1.36
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp##### temporary file created by faxspool in mgetty.
Recommendations
For mgetty version 1.1.36, consider restricting access to the faxspool functionality until a patch is available, or apply a workaround to prevent symlink attacks on temporary files.
Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mgetty