Vulnerability Description
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Kexec-Tools | <= 2.0.7-11 |
References
- http://rhn.redhat.com/errata/RHSA-2015-0986.htmlVendor Advisory
- http://www.securityfocus.com/bid/74622
- http://rhn.redhat.com/errata/RHSA-2015-0986.htmlVendor Advisory
- http://www.securityfocus.com/bid/74622
FAQ
What is CVE-2015-0267?
CVE-2015-0267 is a vulnerability with a CVSS score of 3.6 (LOW). The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink...
How severe is CVE-2015-0267?
CVE-2015-0267 has been rated LOW with a CVSS base score of 3.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0267?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Kexec-Tools.