Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gfax: insecure temporary files

Package(s):

gfax

CVE #(s):

CVE-2007-2839

Created:

July 6, 2007

Updated:

July 11, 2007

Description:

Steve Kemp from the Debian Security Audit project discovered that gfax, a GNOME frontend for fax programs, uses temporary files in an unsafe manner which may be exploited to execute arbitrary commands with the privileges of the root user.

Alerts:

Debian

DSA-1329-1

2007-07-05

(Log in to post comments)