Lucene search

K
ubuntuUbuntuUSN-243-1
HistoryJan 16, 2006 - 12:00 a.m.

tuxpaint vulnerability

2006-01-1600:00:00
ubuntu.com
30

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%

Releases

  • Ubuntu 5.10

Details

Javier Fernández-Sanguino Peña discovered that the tuxpaint-import.sh
script created a temporary file in an insecure way. This could allow a
symlink attack to create or overwrite arbitrary files with the
privileges of the user running tuxpaint.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.10noarchtuxpaint< *UNKNOWN

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%