[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1674 jailer -- insecure temp file generation

ID: oval:org.mitre.oval:def:7317Date: (C)2009-12-15   (M)2022-10-10
Class: PATCHFamily: unix




Javier Fernandez-Sanguino Pena discovered that updatejail, a component of the chroot maintenance tool Jailer, creates a predictable temporary file name, which may lead to local denial of service through a symlink attack.

Platform:
Debian 4.0
Product:
jailer
Reference:
DSA-1674
CVE-2008-5139
CVE    1
CVE-2008-5139
CPE    1
cpe:/o:debian:debian_linux:4.0

© SecPod Technologies