tocsin

Debian/wims: unknown

wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2)

Action: Upgrade wims to 3.62-13.1 or later.

Affected

introducedfixedlast affected
03.62-13.1-

Fixed versions

3.62-13.1

Sources

published · modified · JSON