X-CD-Roast has been reported prone to an insecure file creation vulnerability that may be exploited to corrupt arbitrary files. The issue has been reported to present itself because X-CD-Roast will follow symbolic links when writing specific files. The problem is also conjectured to be exaggerated as a result of a lack of sufficient access controls set by X-CD-Roast on the files that it creates and employs. A local user may leverage this condition to corrupt arbitrary files triggering a system wide denial of service or potentially elevating their system privileges.
X-CD-Roast has been reported prone to an insecure file creation vulnerability that may be exploited to corrupt arbitrary files. The issue has been reported to present itself because X-CD-Roast will follow symbolic links when writing specific files. The problem is also conjectured to be exaggerated as a result of a lack of sufficient access controls set by X-CD-Roast on the files that it creates and employs. A local user may leverage this condition to corrupt arbitrary files triggering a system wide denial of service or potentially elevating their system privileges.