1 results (0.001 seconds)

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

25 Nov 2019 — openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system. openvas-scanner antes del 11-09-2011 crea un archivo temporal de forma no segura cuando se genera el documento de características del sistema OVAL con la herramienta integrada ovaldi habilitada. Un atacante local podría usar este fallo para... • https://access.redhat.com/security/cve/cve-2011-3351 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •