Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

uudeview: insecure temporary file creation

Package(s):

uudeview

CVE #(s):

CVE-2008-2266

Created:

August 12, 2008

Updated:

August 13, 2008

Description:

From the Gentoo advisory: UUdeview makes insecure usage of the tempnam() function when creating temporary files. NZBGet includes a copy of the vulnerable code. A local attacker could exploit this vulnerability to overwrite arbitrary files on the system.

Alerts:

Gentoo

200808-11

2008-08-11

(Log in to post comments)