CVE-2010-4173
22.11.2010, 20:00
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
| Vendor | Product | Version |
|---|---|---|
| openfabrics | libsdp | 𝑥 ≤ 1.1.104 |
| openfabrics | libsdp | 1.1.99 |
| openfabrics | libsdp | 1.1.100 |
| openfabrics | libsdp | 1.1.101 |
| openfabrics | libsdp | 1.1.102 |
| openfabrics | libsdp | 1.1.103 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References