CVE-2009-1297

Name of the Vulnerable Software and Affected Versions open-iscsi versions in SUSE openSUSE 10.3 through 11.1 open-iscsi versions in SUSE Linux Enterprise (SLE) 10 SP2 and 11

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name.

Recommendations For open-iscsi in SUSE openSUSE 10.3 through 11.1, consider restricting access to the iscsi discovery function until a patch is available. For open-iscsi in SUSE Linux Enterprise (SLE) 10 SP2 and 11, consider restricting access to the iscsi discovery function until a patch is available.