ddskk: insecure temporary file [LWN.net]

Package(s):

ddskk

CVE #(s):

CAN-2003-0539

Created:

August 11, 2003

Updated:

August 12, 2003

Description:

Daredevil SKK is a simple Kana to Kanji conversion program, an input method of Japanese for Emacs and XEmacs.

ddskk does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and skk. The Common Vulnerabilities and Exposures project (cve.mitre.org) has allocated the name CAN-2003-0539 to this issue.

Alerts:

Red Hat

RHSA-2003:241-01

2003-08-11

(Log in to post comments)