|
Maelstrom Insecure Symbolic Link Vulnerability
Maelstrom is a popular game originally written for the Macintosh. It has since been ported to Linux, and released under the GPL. It has been reported that some versions of Maelstrom create a temporary file in an insecure manner. The file /tmp/f is created without proper checks. An attacker may create a symbolic link from this location pointing to any target file. When Maelstrom is executed, the target file will be overwritten if the user has sufficient permissions. Later versions of Maelstrom may share this vulnerability. |
|
 Privacy Statement |
