CVE:CVE-2004-0851
CNNVD:CNNVD-200409-016
Net-Acct 0.71之前的版本的(1) write_list和(2) dump_curr_list函数存在漏洞。本地用户借助暂时文件的符号链接攻击覆盖任意文件。
solution:Upgrade ulrich_callmeier net-acct to a higher version than 0.6,0.7,0.71,and avoid the version 0.6,0.7,0.71