Security Advisory

CVE-2007-2056

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-04-30 22:00:00

Last updated 2018-10-19 14:57:01

Assigner mitre

CVSS score not scored

State REJECTED

Description

The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race"). NOTE: the researcher has retracted the original advisory, stating that "the portion of vulnerable code is not called in any current version of AFFLIB and is therefore not exploitable.

← Browse all CVEs View on cve.org ↗