TUBITAK BILGEM Pardus About Symlink Attack Vulnerability

A symlink attack vulnerability has been identified in TUBITAK BILGEM Software Technologies Research Institute Pardus About, prior to version 1.2.1. This vulnerability arises from improper link resolution before file access, allowing for malicious manipulation of file links.

Impact

Exploitation of this vulnerability allows for a symlink attack, where an attacker can create a symbolic link that points to a file or directory, potentially leading to unauthorized access or modification of files.

Remediation

Users are advised to upgrade to version 0.8.0 or later.