Bug#294352: CAN-2004-2473 symlink vulnerability

To: 294352@bugs.debian.org
Subject: Bug#294352: CAN-2004-2473 symlink vulnerability
From: Stefan Fritsch <sf@sfritsch.de>
Date: Sun, 21 Aug 2005 23:43:11 +0200
Message-id: <[🔎] 200508212343.11540.sf@sfritsch.de>
Reply-to: Stefan Fritsch <sf@sfritsch.de>, 294352@bugs.debian.org

If wmFrog is ever packaged vor Debian, care should be taken that
CAN-2004-2473 is fixed:
"wmFrog weather monitor 0.1.6 allows local users to overwrite 
arbitrary files via a symlink attack on temporary files."

See http://xforce.iss.net/xforce/xfdb/18232

Reply to:

Follow-Ups:
- Bug#294352: CAN-2004-2473 symlink vulnerability
  - From: Joey Hess <joeyh@debian.org>

Prev by Date: Bug#324296: marked as done (ITP: ldapscripts -- Add and remove user and groups stored (using ldap))
Next by Date: Bug#273954: Still interested?
Previous by thread: Processed: Re: ITA: amiwm -- The Amiga look-alike window manager
Next by thread: Bug#294352: CAN-2004-2473 symlink vulnerability
Index(es):
- Date
- Thread