aview symbolic links vulnerability
Published:		15.12.2008
Source:		BUGTRAQ
SecurityVulns ID:		9515
Type:		local
Level:		5/10
Description:		Insecure temporary file creation.

Affected:		AVIEW : aview 1.3
CVE:		CVE-2008-4935 (asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file.)

Original document

GENTOO, [ GLSA 200812-14 ] aview: Insecure temporary file usage (15.12.2008)

Discuss:

Read or add your comments to this news (0 comments)