Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fish-shell 安全漏洞
Vulnerability Description
Fish-shell（也称Fish）是挪威软件开发者Axel Liljencrantz所研发的一个专注于交互应用、易用性和友好的用户体验的Unix shell（命令行界面），它支持语法高亮显示、高级的Tab键自动补完等功能。 Fish-shell 2.1.1之前版本中存在安全漏洞。本地攻击者可通过对(1) /tmp/fishd.log.%s，(2) /tmp/.pac-cache.$USER，(3) /tmp/.yum-cache.$USER或(4) /tmp/.rpm-cache.$USER实施符号链接
CVSS Information
N/A
Vulnerability Type
N/A