WMFrog Weather Monitor Symbolic Link Vulnerability
BID:11743
Info
WMFrog Weather Monitor Symbolic Link Vulnerability
| Bugtraq ID: | 11743 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 24 2004 12:00AM |
| Updated: | Nov 24 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Joey Hess. |
| Vulnerable: |
wmFrog Weather Monitor 0.1.6 |
| Not Vulnerable: | |
Discussion
WMFrog Weather Monitor Symbolic Link Vulnerability
A local symbolic link vulnerability affects wmFrog. This issue is due to a failure of the application to securely handle temporary files.
An attacker may leverage this issue to corrupt or overwrite arbitrary files with the privileges of an unsuspecting user that activated the affected application. It has been reported that this issue can be exploited to escalate privileges.
A local symbolic link vulnerability affects wmFrog. This issue is due to a failure of the application to securely handle temporary files.
An attacker may leverage this issue to corrupt or overwrite arbitrary files with the privileges of an unsuspecting user that activated the affected application. It has been reported that this issue can be exploited to escalate privileges.
Exploit / POC
WMFrog Weather Monitor Symbolic Link Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
WMFrog Weather Monitor Symbolic Link Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.