The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-09-22T10:00:00
Updated: 2024-08-07T06:22:24.001Z
Reserved: 2009-09-22T00:00:00
Link: CVE-2009-3289
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-09-22T10:30:00.703
Modified: 2024-11-21T01:06:59.837
Link: CVE-2009-3289
Redhat