Security Advisory

CVE-2010-2449

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-07 19:46:01
Last updated 2024-08-07 02:32:16
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.