The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2009 0014 2 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 219382Upgrade VMware ESXi 4.0 to build number 208167Upgrade VMware ESX 3.5 to build number 199239 | Sep 2, 2010 | Jul 17, 2009 |
| Vmsa 2009 0016 | — | Apply ESXi400-200911201-UG. | Feb 16, 2011 | Jul 17, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub