Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Charities.Cron以不安全方式创建临时文件漏洞
Vulnerability Description
Charities.cron是一款gawk脚本，每天由cron运行。 Charities.cron在建立临时文件时不够安全，可导致本地攻击者进行符号链接攻击。 Charities.cron在运行时会建立临时文件，但建立时没有对文件是否存在进行检查，而且建立的文件名称是可预测的，本地攻击者可以建立符号链接指向任意系统文件，造成文件被破坏，产生拒绝服务攻击，也存在权限提升攻击的可能。 <**>
CVSS Information
N/A
Vulnerability Type
N/A