2013-01-24 22:55:01 2013-01-25 06:00:00

ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD commands.

Vector

LOCAL

Complexity

HIGH

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Krzysztof J. Kowalczyk SumatraPDF 0.7 Kryo iodine 0.5.1 Krzysztof J. Kowalczyk SumatraPDF 0.8 Kryo iodine 0.5.2 Kristof De Jaeger Bundle copy module for Drupal 7.x-1.x Krzysztof J. Kowalczyk SumatraPDF 0.6 Kryo iodine 0.5.0 Konstanty Bialkowski libmodplug 0.8.8.4 Korenix Jetport 5604i Kryo iodine 0.6.0 release candidate 1 KOZOS EasyCTF 1.2 Kryo iodine 0.7.0 KrisonAV 2.1.5 Krzysztof J. Kowalczyk SumatraPDF 1.0.1 Kryo iodine 0.3.2 KrisonAV 1.0.2 Krzysztof J. Kowalczyk SumatraPDF 0.2 Kony Enterprise Mobile Management (EMM) 1.2 Krzysztof Kowalczyk Sumatrapdf 1.1 KrisonAV 0.9.2 KrisonAV 0.9.1.1 KrisonAV 0.9.7 KrisonAV 0.9.3 Kryo iodine 0.3.0 Kryo iodine 0.4.1 Krzysztof J. Kowalczyk SumatraPDF 0.3 Krzysztof J. Kowalczyk SumatraPDF 0.9.2 Kryo iodine 0.4.0 Krollontrack Easyrecovery Professional 6.0.9 Krzysztof J. Kowalczyk SumatraPDF 0.9.1 Kryo iodine 0.3.4 Kryo iodine 0.3.1 Krzysztof J. Kowalczyk SumatraPDF 0.1 Krzysztof J. Kowalczyk SumatraPDF 1.2 Krzysztof J. Kowalczyk SumatraPDF 0.9 Krzysztof J. Kowalczyk SumatraPDF 0.4 Krzysztof J. Kowalczyk SumatraPDF 0.8.1 krstarice Forum Krstarice (aka com.tapatalk.forumkrstaricacom) for Android 3.5.14 Kopf Outlook Attachment Remover 2.0 KOZOS EasyCTF 1.1 KrisonAV 5.1.1 KrisonAV 3.0.2 KOZOS EasyCTF 1.0 Koz.com iChat ROOMS Server 3.0 KrisonAV 5.1.0 Koyotesoft Free Easy Burner 5.0.0.0 KrisonAV 3.0.1 KrisonAV 2.0.1 Beta KrisonAV 1.0.0 Beta KrisonAV 2.1.3 KrisonAV 1.0.1 KrisonAV 0.9.4 KrisonAV 2.1.6 KrisonAV 0.9.5 KrisonAV 1.1.35 KrisonAV 3.0.0 Krzysztof J. Kowalczyk SumatraPDF 0.5 KOZOS EasyCTF 1.3 Kryo iodine 0.4.2 KOZOS EasyCTF 1.4 KrisonAV 0.9.6 Krzysztof J. Kowalczyk SumatraPDF 0.9.3 Korenix Jetport 5604 Kratosnetworks Neuralstar 8.3.38 Korenix Jetport 5601 Korenix Jetport 5601f Kristof De Jaeger Bundle copy module for Drupal 7.x-1.0 Kryo iodine 0.3.3