Feynmf symbolic links vulnerability
Published:		21.11.2007
Source:		BUGTRAQ
SecurityVulns ID:		8367
Type:		remote
Level:		5/10
Description:		feynmf.pl symbolic linkcs vulnerability on temporary files creation.

Affected:		FEYNMF : feynmf 1.08
CVE:		CVE-2007-5940 (feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.)

Original document

GENTOO, [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation (21.11.2007)

Discuss:

Read or add your comments to this news (0 comments)