The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
CVSS Score
6.3
EPSS Score
0.0
Published
2011-11-04