[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#506272: CVE-2008-5145: allows local users to overwrite arbitrary files via a symlink attack



Package: ltp-network-test
Version: 20060918-2
Severity: important
Tags: security

Hi,

The following CVE (Common Vulnerabilities & Exposures) id was published for 
ltp-network-test.

CVE-2008-5145[1]:
> ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via
> a symlink attack on a /tmp/runltp.mainmenu.##### temporary file.

If you fix the vulnerability please also make sure to include the CVE id in 
the changelog entry.

[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5145
     http://security-tracker.debian.net/tracker/CVE-2008-5145

Cheers,
-- 
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: