Hi,
Christian noticed that this file actually get overwritten in 
the prerm script. This still means that the prerm script is 
vulnerable to a symlink attack. An attacker creating a 
symlink from /someimportantfile to /tmp/axyl.conf would 
overwrite the content of someimportantfile on a removal of 
axyl. CVE id requested.

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpX5rxLtV36M.pgp
Description: PGP signature

Reply via email to