iproute2 is distributed with a script named 'netbug'. The 'netbug' script is reported prone to an unspecified insecure temporary file creation vulnerability. It is conjectured that the 'netbug' script creates a temporary file using a predictable filename in a world read-writeable location. This issue may be leveraged to corrupt arbitrary files with the privileges of a user that invokes the vulnerable script.
iproute2 is distributed with a script named 'netbug'. The 'netbug' script is reported prone to an unspecified insecure temporary file creation vulnerability. It is conjectured that the 'netbug' script creates a temporary file using a predictable filename in a world read-writeable location. This issue may be leveraged to corrupt arbitrary files with the privileges of a user that invokes the vulnerable script.