Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libmail-audit-perl: insecure temporary file creation

Package(s):

libmail-audit-perl

CVE #(s):

CVE-2005-4536

Created:

January 31, 2006

Updated:

March 20, 2006

Description:

Niko Tyni discovered that the Mail::Audit module, a Perl library for creating simple mail filters, logs to a temporary file with a predictable filename in an insecure fashion when logging is turned on.

Alerts:

Debian	DSA-960-3	2006-03-20
Debian	DSA-960-2	2006-01-31
Debian	DSA-960-1	2006-01-31

(Log in to post comments)