The host is running Mathematica and is prone to arbitrary file overwriting vulnerability.

Successful exploitation will allow attackers to create world writable files in normally restricted directories or corrupt restricted files via symlink attacks. Impact Level: Application

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. A workaround is to use command-line math instead of pretty interface.

The flaw is due to handling of files in the '/tmp/MathLink' directory in an insecure manner.

Wolfram Mathematica 7 on Linux.

• http://marc.info/?l=full-disclosure&m=127380255201760&w=2
• http://secunia.com/advisories/39805
• http://www.securityfocus.com/archive/1/archive/1/511298/100/0/threaded

---

Updated on 2015-03-25