low1.2
CVE-2005-2449
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.
Impact
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sandbox | Sandbox | Versions 1.2, 1.2.1, 1.2.1_r3, 1.2.2, 1.2.3, 1.2.4 |
References
- NVD record
- CVE.org record
- http://bugs.gentoo.org/show_bug.cgi?id=96782
- http://secunia.com/advisories/16214
- http://securitytracker.com/id?1014574
- http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml
- http://www.securityfocus.com/bid/14375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21519
- http://bugs.gentoo.org/show_bug.cgi?id=96782
- http://secunia.com/advisories/16214
- http://securitytracker.com/id?1014574
- http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml
- http://www.securityfocus.com/bid/14375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21519