Vulnerability in Isc Dhcp

CVE-2009-1893

The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.

EPSS: 0.006 (45.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References