#878012 nautilus: path traversal via directory symlink

Package:
nautilus
Source:
nautilus
Description:
file manager and graphical shell for GNOME
Submitter:
Jakub Wilk
Date:
2017-10-08 14:51:08 UTC
Severity:
normal
#878012#3
Date:
2017-10-08 10:34:53 UTC
From:
To:
$ tar -tvvf traversal.tar.gz
lrwxrwxrwx root/root         0 2017-09-30 17:36 tmp -> /tmp
-rw-r--r-- root/root         4 2017-09-30 17:36 tmp/moo

Unpacking this archive in Nautilus creates the /tmp/moo file.