Vulnerability in Bitbucket Xnbd

CVE-2013-0265

The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.

EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.

Affected products

Bitbucket Xnbd — versions 0.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit, Patch)