CVE-2007-3919

Description

(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.

Affected Platforms

Weakness Type

CWE-59

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447795
• http://osvdb.org/41342
• http://osvdb.org/41343
• http://secunia.com/advisories/27389
• http://secunia.com/advisories/27408
• http://secunia.com/advisories/27486