Description
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
Remediation
References
Related Vulnerabilities
WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)
WordPress Plugin CM Ad Changer Multiple Cross-Site Scripting Vulnerabilities (1.7.2)
WordPress Plugin WP Content Copy Protection & No Right Click Security Bypass (3.1.4)
Internet Information Services Other Vulnerability (CVE-2002-0147)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4281)