fdclone: insecure temporary directory [LWN.net]

Package(s):

fdclone

CVE #(s):

CAN-2003-0596

Created:

July 23, 2003

Updated:

September 30, 2003

Description:

fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them with other files under the attacker's control.

CAN-2003-0596

Alerts:

Debian

DSA-352-1

2003-07-22

(Log in to post comments)