Description
iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name.
Affected products
- Novell / suse_linux10 – 10
- Novell / suse_linux11 – 11
- openSUSE / opensuse10.3 – 10.3
- openSUSE / opensuse11.1 – 11.1