CVE:CVE-2005-2449
CNNVD:CNNVD-200508-027
Sandbox 1.2.11之前的版本中的竞争状况使得本地用户可以借助于对sandboxpids.tmp的符号链接攻击创建或重写任意文件。
solution:Upgrade sandbox sandbox to a higher version than 1.2,1.2.1,1.2.1_r3,1.2.2,1.2.3,1.2.4,1.2.5,1.2.5_r1,1.2.5_r2,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,and avoid the version 1.2,1.2.1,1.2.1_r3,1.2.2,1.2.3,1.2.4,1.2.5,1.2.5_r1,1.2.5_r2,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10