Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

dhis-tools-dns: insecure temporary file

Package(s):

dhis-tools-dns

CVE #(s):

CVE-2005-3341

Created:

December 27, 2005

Updated:

January 4, 2006

Description:

Javier Fernández-Sanguino Peña from the Debian Security Audit project discovered that two scripts in the dhis-tools-dns package, DNS configuration utilities for a dynamic host information System, which are usually executed by root, create temporary files in an insecure fashion.

Alerts:

Debian

DSA-928-1

2005-12-27

(Log in to post comments)