Vulnerability in Openfabrics Libsdp

CVE-2010-4173

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.