CVE-2013-0265 The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.
LowCVSS 2.1
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitbucket xnbd | = 0.1.0-pre | No fix listed |
References
- [oss-security] 20130206 CVE request: Insecure default log file path in xNBD exploit mailing-list patch
- [oss-security] 20130206 Re: CVE request: Insecure default log file path in xNBD exploit mailing-list
- 90008 vdb-entry