CVE-2009-1297

CVE-2009-1297 describes a local privilege escalation vulnerability in the iscsi_discovery component of open-iscsi, affecting SUSE openSUSE 10.3-11.1 and SUSE Linux Enterprise 10 SP2 and 11. An attacker can exploit this flaw by using a symlink attack on a predictably named temporary file, allowing them to overwrite arbitrary files on the system. With a CVSS score of 4.4, this vulnerability has a low attack complexity and requires local access, potentially leading to partial confidentiality, integrity, and availability impacts. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention.