Security Advisory

CVE-2009-0416

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-02-03 23:00:00
Last updated 2024-08-07 04:31:26
Assigner mitre
State PUBLISHED

Description

The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files.