|
FreeBSD contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a malicious user creates a symbolic link which is traversed by gdc when writing its debug ouput to a file, typically and inappropriately redirected to "/var/tmp/gated_dump" or "/var/tmp/gdb_dump". This flaw can be used to overwrite any file on the victim system as gdc runs setuid root and may consequently lead to a loss of integrity.
|
webley.com -
