[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1676 flamethrower (0.1.8-1+etch1) -- insecure temp file generation

ID: oval:org.mitre.oval:def:8316Date: (C)2009-12-15   (M)2021-06-02
Class: PATCHFamily: unix




Dmitry E. Oboukhov discovered that flamethrower creates predictable temporary filenames, which may lead to a local denial of service through a symlink attack.

Platform:
Debian 4.0
Product:
flamethrower (0.1.8-1+etch1)
Reference:
DSA-1676
CVE-2008-5141
CVE    1
CVE-2008-5141
CPE    1
cpe:/o:debian:debian_linux:4.0

© SecPod Technologies