Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

txt2man: file overwrite

Package(s):

txt2man

CVE #(s):

CVE-2013-1444

Created:

October 1, 2013

Updated:

October 2, 2013

Description:

From the CVE entry:

A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.

Alerts:

Ubuntu

USN-1979-1

2013-09-30

(Log in to post comments)