Description
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Affected products
- tarantella / tarantella_enterprise3.0 – 3.0
- tarantella / tarantella_enterprise3.01 – 3.01
- tarantella / tarantella_enterprise3.10 – 3.10
- tarantella / tarantella_enterprise3.11 – 3.11
- tarantella / tarantella_enterprise3.20 – 3.20