Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

noweb: insecure temporary file

Package(s):

noweb

CVE #(s):

CVE-2005-3342

Created:

February 13, 2006

Updated:

February 27, 2006

Description:

Javier Fernández-Sanguino Peña from the Debian Security Audit project discovered that a script in noweb, a web like literate-programming tool, creates a temporary file in an insecure fashion.

Alerts:

Gentoo	200602-14	2006-02-26
Ubuntu	USN-254-1	2006-02-21
Debian	DSA-968-1	2006-02-13

(Log in to post comments)