CVE

Id
58881  
CVE No.
CVE-2012-5638  
Status
Candidate  
Description
The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments