Description
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Remediation
References
Related Vulnerabilities
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7317)
Joomla! Core 3.x.x Information Disclosure (3.7.0 - 3.8.1)
Jboss EAP Improper Authentication Vulnerability (CVE-2020-14299)
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.32)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32472)