Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

sup: insecure temporary file

Package(s):

sup

CVE #(s):

CAN-2003-0606

Created:

July 29, 2003

Updated:

October 1, 2003

Description:

sup, a package used to maintain collections of files in identical versions across machines, fails to take appropriate security precautions when creating temporary files. A local attacker could exploit this vulnerability to overwrite arbitrary files with the privileges of the user running sup.

CAN-2003-0606

Alerts:

Debian

DSA-353-1

2003-07-29

(Log in to post comments)