p PatchFirst

CVE-2009-1297

CVE-2009-1297

This page contains facts from public vulnerability sources. Check the original advisory before updating.

iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name.

EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • open-iscsi Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.0.871-1

    Update to 2.0.871-1

  • open-iscsi Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.871-1

    Update to 2.0.871-1

  • open-iscsi Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.871-1

    Update to 2.0.871-1

Original sources

Check your server →