LWN.net Logo

policyd-weight: insecure temp file

Package(s):policyd-weight CVE #(s):CVE-2008-1569
Created:March 27, 2008 Updated:April 11, 2008
Description: From the Debian alert: Chris Howells discovered that policyd-weight, a policy daemon for the Postfix mail transport agent, created its socket in an insecure way, which may be exploited to overwrite or remove arbitrary files from the local system.
Alerts:
Debian DSA-1531-1 2008-03-27
Debian DSA-1531-2 2008-03-29
Gentoo 200804-11 2008-04-11

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.