Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Sysstat Isag Temporary File Creation Vulnerability

The Sysstat Isag command is prone to an issue that may allow malicious local users to corrupt system files, most likely resulting in loss of data or a denial of service.

The source of this vulnerability is that the utility creates temporary files in an insecure manner, facilitating creation of malicious symbolic links in the /tmp directory.







 

Privacy Statement
Copyright 2009, SecurityFocus