Article Source Ubuntu Security Notices
October 5, 2009, 2:34 pm
October 5, 2009, 2:34 pm
Arand Nash discovered that applications linked to GLib (e.g. Nautilus) did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information…