oss-sec mailing list archives

Re: CVE id request: cecilia insecure temporary file usage

From: "Steven M. Christey" <coley () linus mitre org>
Date: Wed, 16 Apr 2008 10:35:49 -0400 (EDT)


======================================================
Name: CVE-2008-1832
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1832
Reference: CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321

lib/prefs.tcl in Cecilia  2.0.5 allows local users to overwrite
arbitrary files via a symlink attack on the csvers temporary file.

Current thread:

CVE id request: cecilia insecure temporary file usage Nico Golde (Apr 15)
- Re: CVE id request: cecilia insecure temporary file usage Steven M. Christey (Apr 16)