LWN.net Logo

mon: insecure temp files

Package(s):mon CVE #(s):CVE-2008-4477
Created:October 9, 2008 Updated:October 17, 2008
Description: mon has an insecure temporary file creation vulnerability. From the Debian alert:

Dmitry E. Oboukhov discovered that the test.alert script used in one of the alert functions in mon, a system to monitor hosts or services and alert about problems, creates temporary files insecurely, which may lead to a local denial of service through symlink attacks.

Alerts:
Mandriva MDVSA-2008:214 2008-10-16
Debian DSA-1648-1 2008-10-08

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds