CVE-2007-1500 Information

Description

The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files as demonstrated using /tmp/lsat1.lsat.

Reference

http://bugs.gentoo.org/show_bug.cgi?id=159542 http://osvdb.org/34267 http://secunia.com/advisories/24526 http://security.gentoo.org/glsa/glsa-200703-20.xml http://www.securityfocus.com/bid/23014 https://exchange.xforce.ibmcloud.com/vulnerabilities/33057