CVE-2020-10737

CVE-2020-10737 describes a race condition in the mkhomedir tool within the oddjob package (versions prior to 0.34.5 and 0.34.6). This flaw allows a privileged attacker to create a symlink during home directory creation, leading to an unprivileged user gaining ownership of an arbitrary target folder. The vulnerability has a CVSS score of 6.3 (Medium), indicating a local attack with high complexity, requiring high privileges and user interaction, but resulting in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.