The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.
References
Configurations
Configuration 1 (hide)
AND |
|
History
13 Feb 2023, 01:17
Type | Values Removed | Values Added |
---|---|---|
Summary | The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command. | |
References |
|
02 Feb 2023, 15:15
Type | Values Removed | Values Added |
---|---|---|
Summary | CVE-2009-1893 dhcp: insecure temporary file use in the dhcpd init script | |
References |
|
Information
Published : 2009-07-17 16:30
Updated : 2023-12-10 10:51
NVD link : CVE-2009-1893
Mitre link : CVE-2009-1893
CVE.ORG link : CVE-2009-1893
JSON object : View
Products Affected
isc
- dhcp
redhat
- enterprise_linux
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')