The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS 2.0
Severity: LOW
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| lvm | logical_volume_management_utilities | 1.0.4 |
| gentoo | linux | * |
| lvm | logical_volume_management_utilities | 1.0.7 |
| lvm | logical_volume_management_utilities | 1.0.8 |
| lvm | logical_volume_management_utilities | 1.0.1 |