CVE:CVE-2004-1167
CNNVD:CNNVD-200501-155
mirrorselect是一个镜像站点选择程序。
mirrorselect 0.89及之前版本存在文件覆盖漏洞。
由于mirrorselect在任意用户均可写的位置上创建临时文件，并且文件名是可被预测的，这使得远程攻击者可通过符号链接方式，覆盖任意文件。
solution:Upgrade gentoo mirrorselect to a higher version than 0.80,0.81,0.82,0.83,0.84,0.85,0.86,0.87,0.88,and avoid the version 0.80,0.81,0.82,0.83,0.84,0.85,0.86,0.87,0.88