CVE:CVE-2008-4946
CNNVD:CNNVD-200811-091
convirt 0.8.2版本允许本地用户借助一个对/tmp/set_output临时文件的symlink攻击，重写任意文件。该临时文件与image_store/中的(1)_template_/provision.sh, (2)Linux_CD_Install/provision.sh,(3)Fedora_PV_Install/provision.sh,(4)CentOS_PV_Install/provision.sh,(5)common/provision.sh,(6) example/provision.sh和(7) Windows_CD_Install/provision.sh脚本有关。
solution:Upgrade convirture convirt to a higher version than 0.8.2,and avoid the version 0.8.2