retitle 466382 wyrd: CVE-2008-0806 insecure tempfile creation allows symlink attack thanks
Hi, CVE-2008-0806 was assigned to this. ====================================================== Name: CVE-2008-0806 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0806 Reference: CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466382 Reference: BID:27848 Reference: URL:http://www.securityfocus.com/bid/27848 Reference: SECUNIA:29009 Reference: URL:http://secunia.com/advisories/29009 wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file. Kind regards Nico -- Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted.
pgpyrgihjmW5H.pgp
Description: PGP signature
