Gentoo: GLSA-200511-30 Normal: Sshfs & Lvm-User Symbolic Link Vulnerability

Gentoo Linux Security Advisory GLSA 200411-22 https://security.gentoo.org/ Severity: Normal Title: Davfs2, lvm-user: Insecure tempfile handling Date: November 11, 2004 Bugs: #68406, #69149 ID: 200411-22

Synopsis ======= Davfs2 and the lvmcreate_initrd script (included in the lvm-user package) are both vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files with the rights of the user running them.
Background ========= Davfs2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. lvm-user is a package providing userland utilities for LVM (Logical Volume Management) 1.x features.
...