The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
References
| Link | Resource |
|---|---|
| http://advisories.mageia.org/MGASA-2014-0319.html | Third Party Advisory |
| http://lists.gnu.org/archive/html/bug-readline/2014-03/msg00057.html | Patch Vendor Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html | Third Party Advisory |
| http://seclists.org/oss-sec/2014/q1/579 | Mailing List Third Party Advisory |
| http://seclists.org/oss-sec/2014/q1/587 | Mailing List Third Party Advisory |
| http://www.mandriva.com/security/advisories?name=MDVSA-2014:154 | Broken Link |
| http://www.mandriva.com/security/advisories?name=MDVSA-2015:132 | Broken Link |
| https://bugzilla.redhat.com/show_bug.cgi?id=1077023 | Issue Tracking |
| https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135686.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2014-08-20 14:55
Updated : 2023-12-10 11:31
NVD link : CVE-2014-2524
Mitre link : CVE-2014-2524
CVE.ORG link : CVE-2014-2524
JSON object : View
Products Affected
opensuse
- opensuse
fedoraproject
- fedora
gnu
- readline
mageia
- mageia
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')