LWN.net Logo

mono: symlink vulnerability

Package(s):mono CVE #(s):CVE-2006-5072
Created:October 4, 2006 Updated:December 1, 2006
Description: The mono System.CodeDom.Compiler classes suffer from a temporary file symlink vulnerability which could be used to overwrite files, or, in this case, even inject arbitrary code into a running mono application.
Alerts:
SuSE SUSE-SA:2006:073 2006-12-01
Gentoo 200611-23 2006-11-28
Mandriva MDKSA-2006:188 2006-10-27
Fedora FEDORA-2006-1012 2006-10-06
Ubuntu USN-357-1 2006-10-04

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds