Security Advisory

CVE-2014-5260

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-08-16 01:00:00
Last updated 2024-08-06 11:41:48
Assigner debian
CVSS score not scored
State PUBLISHED

Description

The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### temporary file.