LMBench symbolic links vulnerability
Published:		10.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10226
Type:		local
Level:		5/10
Description:		Insecure temporary files creation.

Affected:		LMBENCH : LMBench 3
CVE:		CVE-2008-4968 (The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.)

Original document

GENTOO, [ GLSA 200909-10 ] LMBench: Insecure temporary file usage (10.09.2009)

Discuss:

Read or add your comments to this news (0 comments)