Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Performance Co-Pilot不安全临时文件创建漏洞
Vulnerability Description
Performance Co-Pilot (PCP)是由SGI开发的一套支持系统级性能监视的服务，其中的 一个应用程序叫做"pmpost"，默认安装时所有者为root，且设置了setuid位。 Performance Co-Pilot (PCP) 3.6.10之前的版本中的(1)pcmd和(2)pmlogger init脚本中存在漏洞。本地攻击者利用该漏洞通过在/var/tmp/#####目录下的临时文件上的符号链接攻击，重写任意文件。
CVSS Information
N/A
Vulnerability Type
N/A