Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

logcheck: symlink vulnerability

Package(s):

logcheck

CVE #(s):

CAN-2004-0404

Created:

April 21, 2004

Updated:

December 22, 2004

Description:

The logcheck utility handles temporary files in an unsafe way, possibly allowing local attackers to overwrite files.

Alerts:

Mandrake	MDKSA-2004:155	2004-12-22
Debian	DSA-488-1	2004-04-16

(Log in to post comments)