CVE-2009-4454 Information

Description

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.

Reference

http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html http://secunia.com/advisories/37733 http://www.securityfocus.com/archive/1/508507/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/54916