po4a symbolic links problem
Published:		14.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8151
Type:		remote
Level:		5/10
Description:		Symbolic links problem on /tmp/gettextization.failed.po file creation.

Affected:		PO4A : po4a 0.32
CVE:		CVE-2007-4462 (lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.)

Original document

GENTOO, [ GLSA 200709-04 ] po4a: Insecure temporary file creation (14.09.2007)

Discuss:

Read or add your comments to this news (0 comments)