Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| Vim 'tcltags' and 'vimspell.sh' Temporary Files May Let Local Users Gain Elevated Privileges |
|---|
Categorie: Vulnerability
Posted: 2005-01-20 by ReCall
Views: 351
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: A vulnerability was reported in vim in the 'tcltags' and 'vimspell.sh' ancillary scripts. A local user may be able to obtain elevated privileges.
Ubuntu reported that the 'tcltags' and 'vimspell.sh' scripts create temporary files in an unsafe manner. A local user can create a symbolic link (symlink) from a critical file on the system to a temporary file to be used by the Vim scripts. Then, when the affected scripts are run by a target user, the symlinked file may be overwritten with the privileges of the target user.
Javier Fernandez-Sanguino Pena is credited with discovering these flaws.
Impact: A local user may be able to obtain elevated privileges.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1309
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
