CVE:CVE-2014-4038
CNNVD:CNNVD-201406-357
ppc64-diag是一套Linux系统故障诊断工具。该工具提供数据捕获、错误日志分析和预防性测试等功能。
ppc64-diag 2.6.1版本中存在安全漏洞。本地攻击者可通过对文件实施符号链接攻击利用该漏洞覆盖任意文件。
solution:Upgrade suse linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade ppc64-diag_project ppc64-diag to a higher version than 2.6.1,and avoid the version 2.6.1; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0