Temporary file vulnerability in mm library [LWN.net]

Package(s):

CVE #(s):

CAN-2002-0658

Created:

July 30, 2002

Updated:

August 14, 2002

Description:

The OSSP mm library (libmm) is frequently used in Apache setups using mod_ssl and/or mod_php. A temporary file vulnerabiity in OSSP mm library (libmm) before version 1.2.0 permits a local Apache user to gain privileges. It can be exploited to obtain root privilege in some circumstances.

Upgrading sooner, rather than later, is recommended.

Alerts:

Yellow Dog	YDU-20020810-2	2002-08-10
Red Hat	RHSA-2002:156-04	2002-08-05
SuSE	SuSE-SA:2002:028	2002-07-31
Debian	DSA-137-1	2002-07-30
SCO Group	CSSA-2002-032.0	2002-07-30
Red Hat	RHSA-2002:153-07	2002-07-30
OpenPKG	OpenPKG-SA-2002.007	2002-07-30
Mandrake	MDKSA-2002:045	2002-07-29

(Log in to post comments)