Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mhc - insecure temporary file

Package(s):

mhc

CVE #(s):

Created:

February 28, 2003

Updated:

March 5, 2003

Description:

It has been discovered that adb2mhc from the mhc-utils package has a temporary file vulnerability. The default temporary directory uses a predictable name, allowing a local attacker to overwrite arbitrary files.

Alerts:

Debian

DSA-256-1

2003-02-28

(Log in to post comments)