buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2007-11-26T22:00:00

Updated: 2007-12-01T10:00:00

Reserved: 2007-11-26T00:00:00


Link: CVE-2007-6131

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2007-11-26T22:46:00.000

Modified: 2011-03-08T03:01:49.783


Link: CVE-2007-6131

JSON object: View

cve-icon Redhat Information

No data.

CWE