CVE:CVE-2011-2185
CNNVD:CNNVD-201107-408
Fabric 1.1.0之前版本中存在后置链接漏洞。本地用户可借助/tmp/fab.*.tar文件或/tmp/最顶层的某些文件上的符号链接攻击覆盖任意文件。
solution:Upgrade fabfile fabric to a higher version than 1.0.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,1.0.0,1.0.1,and avoid the version (,1.0.2],0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,1.0.0,1.0.1