Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Hylafax: insecure temporary file creation in xferfaxstats

Package(s):

hylafax

CVE #(s):

CAN-2005-3069

Created:

September 30, 2005

Updated:

October 13, 2005

Description:

Javier Fernandez-Sanguino has discovered that xferfaxstats cron script supplied by Hylafax < 4.2.2 insecurely creates temporary files with predictable filenames.

Alerts:

Debian	DSA-865-1	2005-10-13
Mandriva	MDKSA-2005:177	2005-10-07
Gentoo	200509-21	2005-09-30

(Log in to post comments)