Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

shtool: insecure temp file

Package(s):

shtool

CVE #(s):

CAN-2005-1751 CAN-2005-1759

Created:

June 13, 2005

Updated:

June 23, 2005

Description:

GNU shtool, which is also used by ocaml-mysql, has an insecure temp file vulnerability that can be exploited by a local user to overwrite arbitrary files.

Alerts:

OpenPKG	OpenPKG-SA-2005.011	2005-06-23
Gentoo	200506-08	2005-06-11

(Log in to post comments)