FreeBSD : ikiwiki -- tty hijacking via ikiwiki-mass-rebuild (3145faf1-974c-11e0-869e-000c29249b2e)
High Nessus Plugin ID 55157
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionThe IkiWiki development team reports :
Ludwig Nussel discovered a way for users to hijack root's tty when ikiwiki-mass-rebuild was run. Additionally, there was some potential for information disclosure via symlinks.
SolutionUpdate the affected package.