Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SuSE YaST SuSEconfig.gnome-filesystem以不安全方式创建临时文件漏洞
Vulnerability Description
SuSE是一款开放源代码Linux系统。 SuSEconfig.gnome-filesystem以不安全方式创建临时文件，本地攻击者可以利用这个漏洞利用符号连接攻击对系统文件进行破坏。 在通过YaST执行脚本后，会建立'/tmp/tmp.SuSEconfig.gnome-filesystem.$RANDOM'临时文件，其中RANDOM为随机数(一般在1到33000之间)，文件建立权限为任何用户可写，通过建立符号链接指向系统任意文件，当执行时可覆盖符号链接指向的文件，可导致系统崩溃或权限提升。
CVSS Information
N/A
Vulnerability Type
N/A