Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

graphviz: insecure temporary file

Package(s):

graphviz

CVE #(s):

CAN-2005-2965

Created:

October 10, 2005

Updated:

October 21, 2005

Description:

Javier Fernández-Sanguino Peña discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker.

Alerts:

Mandriva	MDKSA-2005:188	2005-10-20
Ubuntu	USN-208-1	2005-10-17
Debian	DSA-857-1	2005-10-10

(Log in to post comments)