CVE-2008-0732 The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.
LowCVSS 2.1
EPSS 0.76%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache geronimo | All versions | No fix listed |
References
- SUSE-SR:2008:003 patch vendor-advisory
- 28838 patch third-party-advisory vendor-advisory