Description
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### temporary file, probably a related issue to CVE-2005-2995.
References (2)
Core 2
Core References
Mailing List, Technical Description mailing-list
x_refsource_mlist
http://lists.debian.org/debian-devel/2008/08/msg00347.html
Broken Link x_refsource_misc
http://uvw.ru/report.sid.txt
Scores
EPSS
0.0039
EPSS Percentile
30.4%
Details
CWE
CWE-59
Status
published
Products (1)
bacula/bacula
2.4.2
Published
Dec 08, 2008
Tracked Since
Feb 18, 2026