im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. It is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. The im-switch utility will write to this temporary file before verifying its existence; this would facilitate a symbolic link attack. An attacker may exploit this issue to corrupt arbitrary files. This corruption may potentially result in the elevation of privileges, or in a system wide denial of service. Fedora Core is a Linux system distributed by RedHat. \'\'/usr/bin/im-switch\'\'use \"/tmp/imswitcher$$\" as a temporary file, but because the /tmp/ directory is writable and $$(PID) can be cloud-registered, Therefore, attackers can use symbolic links to destroy important files in the system, which may cause privilege escalation