CVE:CVE-2009-1297
CNNVD:CNNVD-200910-367
SUSE openSUSE 10.3到11.1和SUSE Linux Enterprise (SLE) 10 SP2到11版本的open-iscsi中的iscsi_discovery允许本地用户借助对未明的临时文件的symlink攻击，重写任意文件。该未明的临时文件有一个可预测的文件名。
solution:Upgrade novell suse_linux to a higher version than 10:sp2,11,and avoid the version 10:sp2,11; Upgrade opensuse opensuse to a higher version than 10.3,11.1,and avoid the version 10.3,11.1