CVE-2014-3986

EPSS 0.04%

發布日:2014/6/8修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-3986

描述

include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.

受影響套件(1)

Debian/lynisfrom 0, < 1.5.5-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3986