Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BRU XBRU以不安全方式建立临时文件漏洞
Vulnerability Description
BRU是一款Tolis Group公司开发和维护的备份和恢复工具,可使用在Linux系操作系统下。 BRU在建立临时文件时不安全,本地攻击者可以利用这个漏洞进行符号链接攻击。 BRU以suid root属性安装,当执行时会以root用户权限建立临时文件/tmp/xbru_dscheck.dd,BRU建立这个临时文件时没有检查文件是否存在,可导致本地攻击者通过符号链接攻击方式破坏系统任意文件,包括属主为root用户的文件。
CVSS Information
N/A
Vulnerability Type
N/A