CVE-2005-2449

Description

Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://bugs.gentoo.org/show_bug.cgi?id=96782
• http://secunia.com/advisories/16214
• http://securitytracker.com/id?1014574
• http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml
• http://www.securityfocus.com/bid/14375
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21519