openoffice.org: insecure temp files
Package(s): | openoffice.org, openoffice.org-amd64 | CVE #(s): | CVE-2008-4937 | ||||||||||||||||
Created: | November 25, 2008 | Updated: | March 10, 2009 | ||||||||||||||||
Description: | From the Ubuntu advisory: Dmitry E. Oboukhov discovered that senddoc, as included in OpenOffice.org, created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. This issue only affected Ubuntu 8.04 LTS. | ||||||||||||||||||
Alerts: |
|