YaST packages management system weak permissions

2005-09-1700:00:00

BUGTRAQ

vulners.com

JSON

/var/adm/YaST/InstSrcManager/IS_CACHE_0x0000000X/DATA/descr file is world writable. There is a buffer overflow on oversized package location while parsing this file.

CPENameOperatorVersion
suse linuxeq9.3

CPE	Name	Operator	Version
	suse linux	eq	9.3

References

vulners.com/securityvulns/securityvulns:doc:9752

JSON