CVE-2009-1297
SUSE Linux and openSUSE - Arbitrary File Write via Symlink Attack on Temporary File
Title source: llmDescription
iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:109
Third Party Advisory x_refsource_confirm
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241
Vendor Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
Scores
EPSS
0.0002
EPSS Percentile
6.2%
Details
CWE
CWE-59
Status
published
Products (4)
novell/suse_linux
10 sp2
novell/suse_linux
11
opensuse/opensuse
10.3
opensuse/opensuse
11.1
Published
Oct 23, 2009
Tracked Since
Feb 18, 2026