screenie symbolic links vulnerabilities
Published:		10.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10227
Type:		local
Level:		5/10
Description:		Temporary file /tmp/.screenie.##### is created in insecure way.

Affected:		SCREENIE : screenie 1.30
CVE:		CVE-2008-5371 (screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file.)

Original document

GENTOO, [ GLSA 200909-09 ] Screenie: Insecure temporary file usage (10.09.2009)

Discuss:

Read or add your comments to this news (0 comments)