lha symbolic links problem

[EN] securityvulns.ru no-pyccku

lha symbolic links problem
Published:		19.04.2007
Source:		CVE
SecurityVulns ID:		7606
Type:		local
Threat Level:		5/10
Description:		Symbolic links problem on temporary files creation.

CVE:

CVE-2007-2030 (lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.)