CVE-2011-3351 openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw...
HighCVSS 7.1
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openvas-scanner | < 2011-09-11 | 2011-09-11 |
| openvas-scanner | = through 2011-09-11 | No fix listed |
References
- access.redhat.com broken-link
- bugzilla.redhat.com issue-tracking third-party-advisory
- bugzilla.suse.com issue-tracking third-party-advisory
- security-tracker.debian.org third-party-advisory