Security Advisory

CVE-2014-4996

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-01-10 18:00:00
Last updated 2024-08-06 11:34:36
Assigner mitre
State PUBLISHED

Description

lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to write to arbitrary files via a symlink attack on /tmp/my.cnf.#{target_host}.