| Package | Affected versions | Patched versions |
|---|---|---|
| libsdp | = 1.1.100= 1.1.101= 1.1.102= 1.1.103= 1.1.99≤ 1.1.104 |
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free