|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
Knoppix contains a flaw that allows a local attacker to overwrite arbitrary files and possibly gain root privileges. The issue is due to the Qt library creating temporary files with static names that are vulnerable to standard symlink attack. If an attacker creates a symlink before a system reboot, they may overwrite arbitrary files. Under the right circumstances, an attacker could also use this to gain root privileges.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Denial of Service,
Race Condition
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
Knoppix
 |
3.1 |
|
|
|
|
Credit |
- Hugo Vázquez Caramés - hugo
 infohacking.com - InfoHacking
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
