YaST packages management system weak permissions
Published:		17.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5228
Type:		local
Level:		5/10
Description:		/var/adm/YaST/InstSrcManager/IS_CACHE_0x0000000X/DATA/descr file is world writable. There is a buffer overflow on oversized package location while parsing this file.

Affected:

SUSE : SUSE LINUX 9.3

Original document

l0om, worring about YaST in SuSE 9.3 and maybe lower (17.09.2005)

Discuss:

Read or add your comments to this news (0 comments)