eroaster: insecure temporary file [LWN.net]

Package(s):

eroaster

CVE #(s):

CAN-2003-0656

Created:

August 19, 2003

Updated:

October 1, 2003

Description:

A vulnerability was discovered in eroaster where it does not take any security precautions when creating a temporary file for the lockfile. This vulnerability could be exploited to overwrite arbitrary files with the privileges of the user running eroaster.

CAN-2003-0656

Alerts:

Gentoo	200309-04	2003-09-02
Mandrake	MDKSA-2003:083	2003-08-19
Debian	DSA-366-1	2003-08-05

(Log in to post comments)