Description (CNA)
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.debian.org/security/2003/dsa-352
- http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=186219
ADP enrichment
No English description supplied.