CVE:CVE-2009-0416
CNNVD:CNNVD-200902-063
Manageability (SBLIM) sblim-sfcb 1.3.2 版本的Standards Based Linux Instrumentation中的SSL凭证安装程序(genSslCert.sh)允许本地用户借助一个对(1)/var/tmp/key.pem,(2)/var/tmp/cert.pem和(3)/var/tmp/ssl.cnf临时文件的symlink攻击，重写任意文件。
solution:Upgrade standards_based_linux_instrumentation sblim-sfcb to a higher version than 1.3.2,and avoid the version 1.3.2