ALT-PU-2020-3191-1
Closed vulnerabilities
Published: 2010-11-22
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2010-4173
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Severity: LOW (3.3)
References:
- http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz
- http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz
- [oss-security] 20101116 CVE Request: libsdp
- [oss-security] 20101116 CVE Request: libsdp
- [oss-security] 20101116 Re: CVE Request: libsdp
- [oss-security] 20101116 Re: CVE Request: libsdp
- https://bugzilla.redhat.com/show_bug.cgi?id=647941
- https://bugzilla.redhat.com/show_bug.cgi?id=647941