gnucash symbolic links vulnerability
Published:		21.02.2007
Source:		BUGTRAQ
SecurityVulns ID:		7273
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:		GNU : gnucash 2.0
CVE:		CVE-2007-0007 (gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] temporary files.)

Original document

MANDRIVA, [ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues. (21.02.2007)

Discuss:

Read or add your comments to this news (0 comments)