Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

geneweb: insecure file operations

Package(s):

geneweb

CVE #(s):

CAN-2005-0391

Created:

April 19, 2005

Updated:

April 20, 2005

Description:

Tim Dijkstra discovered a problem during the upgrade of geneweb, a genealogy software with web interface. The maintainer scripts automatically converted files without checking their permissions and content, which could lead to the modification of arbitrary files.

Alerts:

Debian

DSA-712-1

2005-04-19

(Log in to post comments)