Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

backupninja: insecure temporary file

Package(s):

backupninja

CVE #(s):

Created:

September 30, 2005

Updated:

October 5, 2005

Description:

Moritz Muehlenhoff discovered the handler code for backupninja creates a temporary file with a predictable filename, leaving it vulnerable to a symlink attack.

Alerts:

Debian

DSA-827-1

2005-09-29

(Log in to post comments)