CyberRota Analysis
AI-GeneratedA vulnerability exists in the sblim-cmpi-base package due to insecure temporary file creation in provider registration scripts, allowing local unprivileged users to execute symlink attacks. This could enable an attacker to redirect privileged writes to arbitrary files, potentially overwriting root-owned files and disrupting system services. Organizations using affected versions of sblim-cmpi-base should prioritize remediation, especially if the scripts are executed with elevated privileges.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during script execution in a privileged context. This can lead to the overwrite of root-owned files, potentially disrupting system services or operation. Exploitation is conditional on the script running with elevated privileges and may be mitigated by sticky-directory symlink protections.