Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LWN.net Weekly Edition for September 4, 2008

The Kernel Hacker's Bookshelf: UNIX Internals

LWN.net Weekly Edition for August 28, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

Berkeley MPEG Tools: multiple insecure temporary files

Package(s):

mpeg-tools

CVE #(s):

CAN-2005-3115

Created:

October 3, 2005

Updated:

October 5, 2005

Description:

Mike Frysinger of the Gentoo Security Team discovered that mpeg_encode and the conversion utilities were creating temporary files with predictable or fixed filenames. The 'test' make target of the MPEG Tools also relied on several temporary files created insecurely.

Alerts:

Gentoo

200510-02

2005-10-03

(Log in to post comments)