Advertisement

Netronome is hiring!

Interested in hardware, diags, validation, Linux, C, ARM, Microcode and low level programming and blazing networks?

Create an account

Subscribe to LWN

LWN.net Weekly Edition for February 9, 2012

LWN.net Weekly Edition for February 2, 2012

A tempest in a toybox

LWN.net Weekly Edition for January 26, 2012

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Acrobat reader temporary files

Package(s):

acroread

CVE #(s):

Created:

July 8, 2002

Updated:

July 10, 2002

Description:

There is a symlink attack vulnerability in Acrobat Reader 5.05. Acroread uses a file it creates with wide open permissions (mode 666) in /tmp; it also follows symlinks.

See the report of the bug in Acrobat Reader 5.05 for the details. The problem has also been reported in version 4.05.

Alerts:

Gentoo

acroread-20020707

2002-07-07

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds