| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
openssl: der_chop script temp file vulnerability
| Package(s): | openssl | CVE #(s): | CAN-2004-0975 | ||||||||||||
| Created: | November 11, 2004 | Updated: | July 19, 2005 | ||||||||||||
| Description: | The der_chop script in openssl has a temp file vulnerability that may allow an attacker to overwrite arbitrary files with the permissions that the script is running under. | ||||||||||||||
| Alerts: |
| ||||||||||||||
(Log in to post comments)
openssl: der_chop script temp file vulnerability
Posted Jul 28, 2005 8:00 UTC (Thu) by mjc@redhat.com (guest, #2303) [Link]
Fixed by RHSA-2005:476 on 20050601