LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Sponsored link

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Recent Features

LWN.net Weekly Edition for September 4, 2008

The Kernel Hacker's Bookshelf: UNIX Internals

DRI, BSD, and Linux

SCHED_FIFO and realtime throttling

LWN.net Weekly Edition for August 28, 2008

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ

Netatalk: insecure tempfile handling in etc2ps.sh

Package(s):netatalk CVE #(s):CAN-2004-0974
Created:October 25, 2004 Updated:November 2, 2004
Description: The etc2ps.sh script creates temporary files in world-writeable directories with predictable names. A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When etc2ps.sh is executed, this would result in the file being overwritten with the rights of the user running the utility, which could be the root user.
Alerts:
Mandrake MDKSA-2004:121 2004-11-01
Gentoo 200410-25 2004-10-25
(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds